Senior/Staff Engineer, Application & Product Security

About the role

Grow was born to tackle a critical challenge: making mental health care more effective and accessible for everyone. Since launching in 2020, 15 million sessions have started on Grow, and we've barely scratched the surface. We do it through a three-sided marketplace that empowers providers, augments insurance payors, and serves patients.

You'll make the secure path - the easy path for our engineering org of roughly 145 engineers, baking secure defaults, CI guardrails, and threat modeling into the SDLC so security ships with the product instead of blocking it, including for our fast growing AI and agent features.

Responsibilities

• Champion a secure by default culture, building defense in depth into our frameworks, architecture, and everyday processes
• Develop security requirements and work directly with teams to build them into new applications and services
• Manually dig into our source code to build a real, working understanding of our products, not just a surface level view from tooling output
• Drive the product security roadmap in collaboration with product, engineering, and the wider security team
• Partner across product, engineering, DevOps, and services to ship secure software without slowing teams down
• Design solutions that resolve and mitigate vulnerabilities and risk, and research the threats and attack methods most relevant to Grow
• Run security risk assessments, hands on penetration testing, and threat modeling, and turn those findings into secure coding education for engineers

Requirements

• 6+ years of experience in application or product security
• Ability to code well enough to automate tedious work and build frameworks or services that solve real security problems
• Hands‑on experience with microservice architectures
• Strong collaboration skills within a security team and across the wider engineering organization
• Prioritization based on real risk, not just raw vulnerability counts
• Deep understanding of a codebase built through direct work, not just reliance on SAST, DAST, or SBOM tooling
• Comfort working with product managers and service teams, not just engineers, and genuine care for the product and how it functions

Benefits

• Comprehensive medical, dental, vision, life, and disability coverage
• Grow for Grow: No‑cost access to therapy through the Grow platform (available to US employees)
• Retirement savings programs and equity opportunities to help you invest in your future
• Flexible time off, company paid holidays (which vary by country), and a full company‑wide Winter Break to rest and recharge
• Up to 18 weeks of paid parental leave to support you and your growing family, plus a new child stipend
• Dedicated weekly flexible time for self‑care (therapy, exercise, journaling, time with family, or simply taking a break)
• Annual stipend to support personal wellbeing and professional growth (fitness, education, books, learning resources)
• Pre‑tax commuter benefits for