Security Engineer

Clay Labs•New York, NY

17h

About The Position

Our mission is to help organizations turn any growth idea into reality. We see growth as a creative practice, not a formula. Finding and reaching your best-fit customers takes unique ideas and constant iteration. As AI makes execution faster and tactics easier to copy, creativity is the only lasting advantage. We're already helping thousands of customers — including Anthropic, Notion, Google, and Ramp — go to market with unique data, signals, and AI research. In 2025, we raised a $100M Series C backed by world-class investors including Sequoia, CapitalG, and First Round — and crossed $100M in revenue. In 2026, we announced our second employee tender offer in 9 months at a new $5B valuation. We also launched a community equity round, for our customers, agency partners, and club members. Some things to know about us: Our community includes 11,000+ customers, 150+ integration partners, 125+ agencies, 50+ Clay clubs, and 30k members on Slack. Our culture is unique inside and outside of work. Our team members are also DJs, activists, writers, clowns, marathoners, skydivers, psychedelic therapists, social workers, and more. All employees can work for free with world-class coaches who specialize in creativity, management, and more. Our operating principles — including negative maintenance and non-attached action — guide our work. Read more about them here. Read about us in the NYT, Forbes, First Round Review, and more. Hear from our employees directly on our Glassdoor page! Security Engineering @ Clay Our security engineering team is growing, and we're looking for security engineers, who are technically strong software engineers (senior/staff), with deep expertise in one of the areas below and knowledge in the others. With the advent of AI, the software industry is changing rapidly. Our security engineers are expected to stay ahead of AI-specific risks, leverage AI-powered detection and response tools as part of their security toolkit, and apply AI responsibly in their own workflows — from AI-assisted code analysis to securing the AI systems our product depends on. Cloud Security Secure our cloud environment (network policies, container security, secrets management, misconfiguration prevention) Manage identity and access policies Protect, monitor, and mitigate network-level attacks Experience with infrastructure-as-code, audit, and CSPM tools (we currently use Terraform, AWS Config, AWS Security Hub) Application Security Lead secure coding practices and prevent common vulnerabilities Perform architecture- and code-level security reviews, and collaborate hands-on with engineers to build secure software Manage and respond to penetration tests, bug bounties, and vulnerability scans (including static and dynamic analysis, dependency checks) Develop coding frameworks to standardize best practices for authentication and access control mechanisms Create procedures to manage risk of AI “vibe-coded” tools across the organization Manage abuse and fraud detection Incident Response and Threat Detection Manage monitoring and alerting tools Prevent and detect common attack vectors and tactics (e.g., phishing, malware, APTs) Hands-on experience with incident response, investigation, and remediation (including use of MDM tools)

Requirements

Technically strong software engineers (senior/staff)
Deep expertise in one of the areas below and knowledge in the others
Experience with infrastructure-as-code, audit, and CSPM tools (we currently use Terraform, AWS Config, AWS Security Hub)

Responsibilities

Secure our cloud environment (network policies, container security, secrets management, misconfiguration prevention)
Manage identity and access policies
Protect, monitor, and mitigate network-level attacks
Lead secure coding practices and prevent common vulnerabilities
Perform architecture- and code-level security reviews, and collaborate hands-on with engineers to build secure software
Manage and respond to penetration tests, bug bounties, and vulnerability scans (including static and dynamic analysis, dependency checks)
Develop coding frameworks to standardize best practices for authentication and access control mechanisms
Create procedures to manage risk of AI “vibe-coded” tools across the organization
Manage abuse and fraud detection
Manage monitoring and alerting tools
Prevent and detect common attack vectors and tactics (e.g., phishing, malware, APTs)
Hands-on experience with incident response, investigation, and remediation (including use of MDM tools)