What you'll be doing

Design and implement security features within the Granola app to protect user data and strengthen the product's security posture
Leverage AI-assisted tooling to conduct security assessments, code reviews, threat modeling and penetration testing to identify vulnerabilities in applications
Work closely with development teams to ensure secure coding practices are integrated throughout the software development lifecycle (SDLC)
Track, analyse, and manage application vulnerabilities using AI-assisted triage and prioritisation to guide remediation efforts
Support incident response by investigating application-related security incidents
Stay current on the latest security threats, vulnerabilities, and technologies to enhance security posture

Requirements

Extensive experience building production software with hands-on exposure to security-sensitive work (auth, data handling, API design, encryption or similar) and a strong interest in application security
Comfortable with secure coding practices and at least one of: threat modelling, risk assessments, or incident response, with a willingness to grow across others
Proficiency in programming languages such as TypeScript, Python, or similar
Experience with cloud and cloud security, preferably AWS
Strong communication skills with ability to explain complex security issues to both technical and non-technical audiences

Experience working in a startup environment or strong interest in the zero-to-one phase of building products
Excitement to work in-person from the London office most of the time
Approach problems as a builder who thinks like an attacker
Passion for protecting users and building secure systems
Thrives in fast-paced environments with direct impact on product security
Values working with kind, ambitious, and pragmatic colleagues