Clio-posted 2 months ago
$146,200 - $197,800/Yr
Full-time • Senior
Hybrid • Vancouver, WA
1,001-5,000 employees
Publishing Industries

Clio is more than just a tech company-we are a global leader that is transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice. We are currently seeking a Senior Application Security Engineer to join our rapidly growing Security team. The Application Security team is responsible for emulating real-world adversaries to proactively discover, exploit, and help remediate critical security vulnerabilities across our applications. We provide an essential adversarial perspective, challenging our defences and partnering with development teams to eliminate flaws before they can be abused. This role is for someone who is passionate about building innovative solutions and being exposed to new challenges and technologies while making an impact. This role can be performed from one of our Canadian offices, remotely across Canada, or a combination of both. Some exceptions may apply.

  • Write, review, debug, and implement tools to help developers avoid security flaws
  • Build partnerships with development teams and advise on security best practices
  • Contribute to collective developer education by driving security awareness and knowledge amongst the product organization
  • Provide detailed guidance and support to teams in vulnerability remediation, and develop frameworks, guidelines, and systematic fixes for recurring vulnerabilities
  • Resolve issues, navigate ambiguity, and maintain positive working relationships with researchers in our Bug Bounty program
  • Identify and implement tools for automated application scanning, static analysis and related tools
  • Perform penetration testing, and offensive campaigns against internal assets
  • Perform reactive incident response and forensics when a security event occurs
  • Perform proactive research to detect new attack vectors
  • Elevate and educate our security culture within Clio, contributing to our cultural values
  • Experience in Application Security, with a strong focus on offensive security and penetration testing
  • Hands-on expertise identifying and exploiting complex vulnerabilities (e.g., SSRF, Deserialization, logic bypasses)
  • Proven ability to lead and conduct formal threat modeling sessions
  • Strong proficiency in at least one major programming language (e.g., Python, .NET, JavaScript)
  • Experience securing applications in modern cloud environments (AWS, Azure, or GCP)
  • Expertise with common application security tools and platforms (e.g., Burp Suite, SAST, SCA)
  • Experience with log aggregation and SIEM technologies
  • Ability to identify malicious behaviour and emerging threats via log analysis
  • Security certifications such as OSCP or OSWE
  • Active participation in the security community (e.g., presenting at conferences, contributing to open-source tools)
  • Experience with Ruby on Rails, Puppet, Kubernetes, Terraform, ELK (Elastic, Logstash and Kibana)
  • Strong AWS security experience on EC2 and managed services
  • Infrastructure security (WAF, ACLs, authentication, device hardening)
  • Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
  • Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, and Dublin) to be in office minimum 2 days per week on our Anchor Days
  • Flexible time off policy, with an encouraged 20 days off per year
  • $2000 annual counseling benefit
  • RRSP matching and RESP contribution
  • Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service