Senior Security Engineer -Application Security

Glance AI is an AI commerce platform shaping the next wave of e-commerce with inspiration-led shopping, less about searching for what you want and more about discovering who you could be. Operating in 140 countries, Glance AI transforms every screen into a stage for instant, personal, and joyful discovery, where inspiration becomes something you can explore, feel, and shop in the moment.

Its proprietary models, seamlessly integrated with Google’s most advanced AI platforms, Gemini and Imagen on Vertex AI, deliver hyper-realistic, deeply personal shopping experiences across categories such as fashion, beauty, travel, accessories, home décor, pets, and more. Designed to seamlessly integrate into everyday consumer technology, Glance AI reimagines the future of e-commerce with inspiration-led discovery and shopping.

With an open architecture built for effortless adoption across hardware and software ecosystems, Glance AI is creating a platform that can become a staple in everyday consumer technology. It partners with the world’s leading smartphone makers, connected TV manufacturers, telecom providers, and global brands - meeting people where they are: on mobile, smart TVs, and brand websites.

Through Glance AI’s rich first-party data and unparalleled consumer access, it harnesses InMobi’s global scale, insights, and targeting capabilities to create high-impact, performance-driven shopping journeys for brands worldwide. Part of the InMobi Group, a global technology and advertising leader reaching over 2 billion devices and serving more than 30,000 enterprise brands worldwide, Glance AI is backed by Google, Jio Platforms, and Mithril Capital.

About the Role

We are looking for an experienced and hands-on Sr. Security Engineer to drive application security initiatives across Glance AI's rapidly evolving technology landscape.

This role will partner closely with Engineering, Product, Platform, AI/ML, and Infrastructure teams to embed security into every stage of the software development lifecycle. You will serve as a trusted security advisor, helping teams design secure solutions, proactively identify risks, and build resilient systems at massive scale.

The ideal candidate combines deep technical expertise with strong architectural thinking and the ability to influence stakeholders across the organization.

What You'll Do

Security Architecture & Design

• Partner with engineering and platform teams to design secure and scalable solutions.
• Conduct architecture and security design reviews for applications, APIs, cloud services, and infrastructure.
• Identify security gaps, weaknesses, trust boundaries, and exposure points in solution architectures.
• Develop and maintain security architecture documentation, including data flows, trust models, security controls, and risk assessments.
• Define security guardrails, standards, and reference architectures for enterprise-wide adoption.

Threat Modeling & Risk Assessment

• Lead threat modeling exercises using methodologies such as STRIDE, PASTA, and ATT&CK-based approaches.
• Identify realistic attack paths and abuse scenarios across applications, cloud platforms, APIs, and AI systems.
• Translate security findings into actionable design and engineering recommendations.
• Drive risk-based decision-making aligned with business objectives.

Application Security & Secure SDLC

• Embed security throughout the Software Development Lifecycle (SDLC).
• Guide development teams on secure coding practices and security-by-design principles.
• Review application security findings from SAST, DAST, SCA, penetration testing, and code reviews.
• Drive remediation efforts and establish secure development standards.
• Support security requirements for APIs, mobile applications, web applications, and microservices.

Perimeter Defense & Security Controls

• Provide strategic oversight and tuning recommendations for:
• Web Application Firewalls (WAF)
• API Gateways
• Bot Mitigation Platforms
• DDoS Protection Services
• CDN Security Controls
• Ensure effective protection against:
• OWASP Top 10 threats
• API attacks
• Credential abuse
• Automated bot attacks
• Layer 7 attacks

Vulnerability & Exposure Management

• Oversee vulnerability management programs across applications, cloud environments, and infrastructure.
• Lead penetration testing initiatives and coordinate remediation efforts.
• Drive attack surface reduction programs.
• Partner with engineering teams to prioritize and address security risks.

Incident Response & Security Operations

• Act as a senior advisor during security incidents.
• Support containment, investigation, root cause analysis, and remediation activities.
• Participate in post-incident reviews and strategic improvement initiatives.

AI & Emerging Technology Security

• Design and implement security controls for AI/ML platforms and applications.
• Evaluate AI-specific risks such as:
• Prompt Injection
• Data Leakage
• Model Abuse
• Unauthorized Model Access
• Supply Chain Risks
• Establish security guardrails aligned with OWASP Top 10 for LLM Applications and emerging AI security standards.
• Evaluate and integrate AI-powered security tools to improve threat detection and security automation.

Cross-Functional Leadership

• Serve as a trusted security advisor for engineering, product, and platform teams.
• Drive security awareness and adoption across the organization.
• Mentor engineers and security practitioners on secure architecture and design practices.
• Influence security strategy and long-term roadmap development.

Must-Have Qualifications

Experience

• 4+ years of experience in Cybersecurity, Application Security/PT.
• Strong understanding of modern application architectures and distributed systems.

Technical Expertise

• Security Architecture and Secure Design Reviews
• Threat Modeling (STRIDE, PASTA, ATT&CK)
• Application Security & Secure SDLC
• Cloud Security (GCP / AWS)
• Kubernetes & Container Security
• API Security
• Identity & Access Management
• Security Automation & DevSecOps
• Vulnerability Management & Penetration Testing

AI Security

• Understanding of AI/ML security concepts and emerging AI threat landscapes.
• Familiarity with OWASP Top 10 for LLM Applications and AI security frameworks.

What Success Looks Like

• Security is embedded into product and platform design from day one.
• Threat modeling becomes a standard part of engineering delivery.
• Security risks are identified and addressed early in the development lifecycle.
• Cloud and AI platforms operate with strong security guardrails.
• Engineering teams adopt secure-by-design practices at scale.
• Security becomes an enabler for innovation rather than a blocker

Why Join Glance AI?

• Work on products serving hundreds of millions of users globally.
• Influence the security strategy of one of the fastest-growing AI-powered consumer platforms.
• Drive security for cutting-edge AI, cloud, and consumer technologies.
• Collaborate directly with Engineering, Product, Data Science, and Platform leaders.
• Solve security challenges at a scale few organizations experience.
• Help define the future of secure AI-powered consumer experiences.

If you're passionate about building secure systems, influencing architecture at scale, and shaping the future of AI security, we'd love to hear from you.

"Glance collects and processes personal data such as your name, contact details, resume and other information that may contain personal data for the purpose of processing your application. Glance utilizes Greenhouse, a third-party platform. Please review Greenhouse's Privacy Policy to understand how the data collected from you is processed and managed. By clicking on 'Submit Application', you acknowledge and agree to the above privacy terms. Should you have any privacy concerns, you may contact us through the details mentioned in your application confirmation email."