Product Engineer, Security

Greptile is an AI code reviewer that helps software companies identify bugs and anti-patterns in pull requests. The Product Engineer, Security will build the company’s security product, including agents and infrastructure for code scanning, vulnerability detection, reproduction, validation, and remediation. The role also involves integrating security findings into engineering workflows and improving product reliability through customer feedback.

What you'll do:

• Build Greptile’s security product from the ground up, including codebase scanning, a security-focused PR bot, continuous pentesting, and tools for code analysis, security testing, and vulnerability reproduction
• Improve how agents understand codebases, identify and investigate potential vulnerabilities, reproduce them, and give developers and coding agents the information they need to fix them
• Build testing and validation infrastructure where agents can detect and reproduce suspected vulnerabilities and verify fixes
• Integrate security findings into pull requests, CI pipelines, and existing engineering workflows
• Design, implement, test, and deploy full features. Talk to developers and security teams, iterate on their feedback, and improve reliability and performance across different types of codebases

What they're looking for:

• B.S. Computer Science or equivalent degree, undergraduate or higher
• 1+ years of software or DevOps engineering experience
• Experience with JavaScript/TypeScript
• Security engineering or research experience through source-code auditing, offensive security work, application security engineering, original bug bounty findings, or strong CTF performance
• Experience building security products or LLM-powered tools and agents is a strong plus