Senior/Staff Engineer, Application & Product Security

Grow Therapy

2d•$182,000 - $288,000•Hybrid

About The Position

Grow Therapy is on a mission to serve as the trusted partner for therapists growing their practice, and patients accessing high-quality care. Powered by technology, we are a three-sided marketplace that empowers providers, augments insurance payors, and serves patients. Following the mass increase in depression and anxiety, the need for accessibility is more important than ever. To make our vision for mental healthcare a reality, we’re building a team of entrepreneurs and mission-driven go-getters. Since launching in February 2021, we’ve empowered more than ten thousand therapists and hundreds of thousands of clients across the country and insurance landscape. We’ve raised more than $328Mm in funding, including our Series D, at a $3B valuation from Sequoia Capital, Transformation Capital, TCV, SignalFire, Menlo Ventures, Goldman Sachs Alternatives, and others. The Opportunity You'll make the secure path - the easy path for our engineering org of roughly 145 engineers, baking secure defaults, CI guardrails, and threat modeling into the SDLC so security ships with the product instead of blocking it, including for our fast growing AI and agent features.

Requirements

6+ years of experience in application or product security
You code well enough to automate tedious work and build frameworks or services that solve real security problems
You've been hands on with microservice architectures
You collaborate well, both within a security team and across the wider engineering org
You prioritize based on real risk, not just raw vulnerability counts
You've rolled up your sleeves and built a deep understanding of a codebase, rather than just talking about SAST, DAST, and SBOM tooling from the outside
You work well with product managers and service teams, not just engineers, and you genuinely care about the product and how it actually functions

Responsibilities

Champion a secure by default culture, building defense in depth into our frameworks, architecture, and everyday processes
Develop security requirements and work directly with teams to build them into new applications and services
Manually dig into our source code to build a real, working understanding of our products, not just a surface level view from tooling output
Drive the product security roadmap in collaboration with product, engineering, and the wider security team
Partner across product, engineering, DevOps, and services to ship secure software without slowing teams down
Design solutions that resolve and mitigate vulnerabilities and risk, and research the threats and attack methods most relevant to Grow
Run security risk assessments, hands on penetration testing, and threat modeling, and turn those findings into secure coding education for engineers

Benefits

Comprehensive medical, dental, vision, life, and disability coverage.
No cost access to therapy through the Grow platform (available to US employees)
Retirement savings programs and equity opportunities to help you invest in your future.
Flexible time off, company paid holidays (which vary by country), and a full company wide Winter Break to rest and recharge
Up to 18 weeks of paid parental leave to support you and your growing family and a new child stipend.
Dedicated weekly flexible time for self care, whether that's therapy, exercise, journaling, time with family, or simply taking a break.
Annual stipend to support your personal wellbeing and professional growth, from fitness and education to books and learning resources.
Pre tax commuter benefits to support teammates working from one of our hub locations.
Support for your home workspace plus meal benefits, with offerings tailored to both remote and hub based employees.
A variety of wellbeing benefits, including wellness memberships, virtual care, pet insurance discounts (where available), and global travel assistance.