Product Engineer, Security

Problems We’re Excited About

• Security is the highest-stakes thing an AI reviewer can get right or wrong. What does a security product developers actually trust look like: codebase-wide scanning, a security-focused PR bot, continuous pentesting, or something nobody has built yet?
• Coding standards can be idiosyncratic and are often poorly documented; can we build agents that learn them through osmosis like a new hire might?
• Can we identify for each customer what types of PR feedback they do and don’t care about, perhaps using some sample efficient RL, in order to increase signal-to-noise ratio?
• Some bugs are best caught by running the code, potentially against discerning AI-generated E2E tests. Can we autonomously deploy feature branches and use agents to parallel try to break the application to detect bugs?

Trajectory

• 22,000+ customers
• 5B lines of code reviewed every month
• Scaled from $0 to eight figures in ARR
• Raised $30M from Benchmark, Y Combinator, Paul Graham, and Initialized

Team

• We have assembled a small, talent dense team who have scaled critical functions at companies like Stripe, Google, Figma, etc.

Responsibilities

• Build Greptile’s security product from the ground up, including codebase scanning, a security-focused PR bot, continuous pentesting, and tools for code analysis, security testing, and vulnerability reproduction.
• Improve how agents understand codebases, identify and investigate potential vulnerabilities, reproduce them, and give developers and coding agents the information they need to fix them.
• Build testing and validation infrastructure where agents can detect and reproduce suspected vulnerabilities and verify fixes.
• Integrate security findings into pull requests, CI pipelines, and existing engineering workflows.
• Design, implement, test, and deploy full features. Talk to developers and security teams, iterate on their feedback, and improve reliability and performance across different types of codebases.

Qualifications

• B.S. Computer Science or equivalent degree, undergraduate or higher
• 1+ years of software or DevOps engineering experience
• Experience with JavaScript/TypeScript
• Security engineering or research experience through source-code auditing, offensive security work, application security engineering, original bug bounty findings, or strong CTF performance
• Experience building security products or LLM-powered tools and agents is a strong plus

You Will Like This Role If

• You want to work on a product that thousands of developers rely on
• The chaos of high growth and things breaking is exciting to you
• You like being in an office every day around other smart people who are excited about what they’re building
• You enjoy turning security theory into a product that helps other developers
• You care about developer experience and want security tools to be informative and delightful to use
• You specifically prefer working in-person over working remote