高级安全工程师（团队负责人）
Senior Security Engineer (Team Lead)
**关于Glia**
Glia是排名第一的银行人工智能平台，帮助社区和区域金融机构提高效率、加速贷款增长、推动存款，并提供能够战胜大银行和金融科技公司的体验。
Glia的银行AI操作系统是现有技术栈之上的核心智能层，激活了一个由专业代理组成的AI工作队伍，这些代理从银行数据、交互历史和记录系统中获取信息。这些经过银行训练的代理自动化了语音和数字渠道的流程——从前台到后台——从而降低运营成本并实现通用银行家模式。
Glia凭借其坚不可摧的安全性和可靠性，赢得了700多家银行和信用合作社的信任。Glia提供了行业首个合同保证的无幻觉承诺。这就是为什么Glia客户能够在第一天就快速且自信地部署银行AI，并获得可衡量的结果。更多关于Glia的信息请访问[glia.com](http://glia.com)。
**DevSec团队**负责Glia的开发者和平台安全——构建护栏和便捷路径，使产品团队可以快速且安全地进行开发。在Glia有一句话：安全不仅仅是一个功能，而是我们服务的一部分。
### **职位描述**
我们正在寻找一位高级安全工程师，能够从端到端的角度思考安全问题——不是只深入一个领域，而是全面考虑：应用、基础设施、供应链、终端设备、运维以及背后的合规面。
这是一次**团队领导职位**的招聘：我们希望找到一位能够带领DevSec团队的人。你将从一名亲力亲为的高级安全工程师开始，学习Glia的系统和安全细节，然后逐步晋升为教练型领导者——在保持深度参与的同时，带领团队交付和成长，并在工程IC职业路径上有明确的发展空间。
#### **入职初期（前三个月）**
你将作为亲力亲为的高级安全工程师，打下坚实的基础。你将：
- 亲自完成安全工作，学习Glia的平台、Glia特有的安全挑战，以及平台组其他成员的工作方式。
- 与我们的安全负责人共同制定公司安全路线图，平衡各领域的风险。
- 熟悉团队、我们的工具以及Glia的项目交付方法。
#### **团队领导角色（入职后）**
一旦你晋升为团队领导，你的工作时间将调整为约60%的领导工作和40%的亲力亲为工作。你将负责：
- **交付与路线图：** 负责安全项目计划
查看英文原文
**About Glia**
Glia is the #1 Banking AI platform, empowering community and regional financial institutions to create efficiencies, accelerate loan growth, drive deposits, and deliver experiences that win against megabanks and fintechs.
Glia's Banking AI Operating System is a central intelligence layer on top of existing tech stacks, activating an AI workforce of specialized agents that draw from banking data, interaction history, and integrated systems of record. These banking-trained agents automate workflows across voice and digital–from front office to back office–resulting in decreased operational costs and the Universal Banker model.
Trusted by 700+ banks and credit unions for its ironclad security and reliability, Glia delivers the industry’s first contractual no-hallucination guarantee. It’s why Glia customers quickly and confidently put Banking AI to work with measurable results from day one. More information about Glia can be found at [glia.com](http://glia.com).
**The DevSec team** owns developer-facing and platform security at Glia - building guardrails and paved paths that let product teams move fast, safely. There is a saying in Glia: security is not just a feature, it's a part of our service.
### **The role**
We're looking for a Senior Security Engineer who thinks about security **end to end** - not one domain deep, but the whole posture: application, infrastructure, supply chain, endpoints, operations, and the compliance surface behind them.
This is a **Team Lead hire**: we're looking for someone who will lead the DevSec team. You will start as a hands-on individual contributor to learn Glia's systems and security specifics, then step up to lead the team as a player-coach - leading the team's delivery and growth while remaining deeply hands-on, with career progression on the engineering IC track.
#### **The Ramp-Up (First 3 Months)**
You will start as a hands-on Senior Security Engineer to build a strong foundation. You will:
- Ship hands-on security work and learn Glia's platform, Glia-specific security challenges, and how the rest of the Platform group operates.
- Co-own the company security roadmap together with our Security Leader, balancing domains by risk.
- Get to know the team, our tooling, and Glia's project delivery methodologies.
#### **The Team Lead Role (Post Ramp-Up)**
Once you step up, your time will shift to ~60% leadership and ~40% hands-on work. You will own:
- **Delivery & roadmap:** own security programs end-to-end - from roadmap shaping and stakeholder alignment through implementation and adoption - prioritising by risk and unblocking the team.
- **People & mentorship:** run 1:1s, manage performance, and grow the team.
- **Hands-on contribution:** lead by example - stay close to the technical work and take on high-leverage security engineering yourself.
### **The Work:**
The role spans the whole security surface, prioritising by risk rather than by specialty:
- **Application & product security** - threat modelling, secure SDLC, design/code review, supply chain security
- **Infrastructure & cloud security** - AWS posture, runtime security, IAM; close collaboration with the Infrastructure team
- **Security automation & AI** - develop and own automation and AI tooling supporting company security goals; secure our AI-assisted development practices and LLM tooling
- **Endpoint & corporate security** - developer endpoint security (MDM, privilege, software governance), secrets hygiene
- **Whole-posture assessment** - run framework-based assessments (CIS Controls), identify where attention bears most value, and turn findings into prioritised, engineering-consumable plans
- **Compliance interface** - connect technical work to SOC 2 / PCI-DSS / ISO 42001 needs
- Mentor engineers, lead blameless post-mortems for security incidents, and present to and align senior management
DevSec is part of the Platform group and works closely with Infrastructure, Developer Acceleration, and Observability. The team is remote-first with fully remote rituals - we have team members in Estonia and Poland today, and for this role we hire **anywhere in Europe**.
### **Tech Stack you will be working with:**
- Infrastructure: AWS (Terraform, Kubernetes)
- CI/CD: Jenkins, GitHub Actions, ArgoCD
- Vulnerability detection & runtime security: Snyk, Sysdig/Falco
- SSO & MDM: Okta, Jamf
- Coding: Python preferred; our product stack includes Elixir, Ruby, and Golang
- AI-assisted development: Claude Code and agentic tooling are part of everyday engineering at Glia
### **Requirements:**
- Credible hands-on experience in at least two security domains (e.g. AppSec + cloud/infra) and literacy across the rest - you think in overall posture and risk, not tools
- You have built or scaled a security program end-to-end (process, tooling, adoption), ideally in a low-structure environment
- Coding and automation ability (Python preferred) and cloud security depth (AWS)
- Experience with AI-assisted development, and with securing it: LLM tooling (e.g. MCP), AI governance awareness
- Leadership readiness with evidence - mentoring, deputising for a lead, or formal lead experience - and the commitment to step up as DevSec Team Lead after ramp-up, owning the team's delivery while staying technical
- An educator and multiplier, not a gatekeeper: you enjoy high-empathy collaboration with developers
- Located in Europe
### **Nice to have:**
- Framework-based posture assessment experience (CIS Controls, NIST CSF, or similar) - you can run an assessment and turn it into a prioritised roadmap
- Pentest, audit, and compliance exposure (SOC 2, PCI-DSS, ISO 42001)
- Terraform/Kubernetes; endpoint/MDM and IdP experience
### Benefits
- Professional development support (trainings, courses, conferences, books, etc)
- Transparent career development system
- Different options for your working preferences (office, remote, flexible)
- Access to all the latest tools and equipment you'll need
- Team events: annual employee awards, internal hackathons, and a dozen cool events from cooking to the Glia olympic games :)
- Generous referral bonuses
Glia is an equal-opportunity employer. Glia does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law.
_The Glia Talent Acquisition team uses **@**_ [_**glia.com**_](http://glia.com) _and_ [_**@**_](mailto:darina.danchenko@gliatalent.com) [_**gliatalent.com**_](http://gliatalent.com) _email addresses for coordinating interviews, providing updates, and sending documents._
_Our hiring process involves an introduction, practical and team interviews, and a decision and offer. For more information, visit our_ [_Recruitment Privacy Notice page_](https://www.glia.com/eu-recruitment-privacy-notice) _or contact our talent team via **talent@glia.com**_