Senior Application Security Engineer, Clio

CA$146.2-197.8k

We aim to hire all candidates between the minimum and the midpoint ($172,000) of the full salary range. We reserve the midpoint to the maximum of the salary band for internal employees who demonstrate sustained high performance and impact at Clio

AWS

Kubernetes

GCP

JavaScript

Python

.NET

Terraform

Kibana

ELK

Azure

Puppet

Ruby on Rails

Senior and Expert level

Toronto

Vancouver

Remote from Canada

More information about location

Legal practice management software

Be an early applicant

Legal practice management software

1001+ employees

B2BSecurityComplianceLegalSaaS

Be an early applicant

CA$146.2-197.8k

AWS

Kubernetes

GCP

JavaScript

Python

.NET

Terraform

Kibana

ELK

Azure

Puppet

Ruby on Rails

Senior and Expert level

Toronto

Vancouver

Remote from Canada

More information about location

1001+ employees

B2BSecurityComplianceLegalSaaS

Company mission

Clio's mission is to build cloud-based and client-centred technology that will transform the legal experience for all.

Job

Company

Role

Who you are

This role is for someone who is passionate about building innovative solutions and being exposed to new challenges and technologies while making an impact
Experience in Application Security, with a strong focus on offensive security and penetration testing
Hands-on expertise identifying and exploiting complex vulnerabilities (e.g., SSRF, Deserialization, logic bypasses)
Proven ability to lead and conduct formal threat modeling sessions
Strong proficiency in at least one major programming language (e.g., Python, .NET, JavaScript)
Experience securing applications in modern cloud environments (AWS, Azure, or GCP)
Expertise with common application security tools and platforms (e.g., Burp Suite, SAST, SCA)
Experience with log aggregation and SIEM technologies
Ability to identify malicious behaviour and emerging threats via log analysis

Desirable

Security certifications such as OSCP or OSWE
Active participation in the security community (e.g., presenting at conferences, contributing to open-source tools)
Experience with Ruby on Rails, Puppet, Kubernetes, Terraform, ELK (Elastic, Logtash and Kibana)
Strong AWS security experience on EC2 and managed services
Infrastructure security (WAF, ACLs, authentication, device hardening)

What the job involves

We are currently seeking a Senior Application Security Engineer to join our rapidly growing Security team
The Application Security team is responsible for emulating real-world adversaries to proactively discover, exploit, and help remediate critical security vulnerabilities across our applications
We provide an essential adversarial perspective, challenging our defences and partnering with development teams to eliminate flaws before they can be abused
Write, review, debug, and implement tools to help developers avoid security flaws
Build partnerships with development teams and advise on security best practices
Contribute to collective developer education by driving security awareness and knowledge amongst the product organization
Provide detailed guidance and support to teams in vulnerability remediation, and develop frameworks, guidelines, and systematic fixes for recurring vulnerabilities
Resolve issues, navigate ambiguity, and maintain positive working relationships with researchers in our Bug Bounty program
Identify and implement tools for automated application scanning, static analysis and related tools
Perform penetration testing, and offensive campaigns against internal assets
Perform reactive incident response and forensics when a security event occurs
Perform proactive research to detect new attack vectors
Elevate and educate our security culture within Clio, contributing to our cultural values

Our take

Modern law firms increasingly manage their work digitally but the lack of a specialised remote solution means that workflows have become fragmented. This leads to legal practice managers having to juggle multiple software solutions across various devices.

Clio provides a legal practice management platform designed for law firms, allowing users to manage billing for legal aid cases, access and manage documents and store files across multiple devices. Whilst other startups are operating in this niche, Clio has uniquely focussed on synchronisation across remote devices and on a wide range of integrations, allowing the user to access information from other industry standard software such as Xero and Klyant from within a single interface.

Clio has raised a large amount of investment capital, most recently in a 2021 Series E round which saw the company attain unicorn status with a valuation exceeding $1 billion. This funding is being used to accelerate its product development, hire additional talent, and for expansion into new markets with a focus on the EMEA region, particularly the UK and Ireland.

Kirsty

Company Specialist at Welcome to the Jungle

Insights

Glassdoor (3.6)

Company

Company benefits

Company equity
$500 contribution when you become a parent and/or guardian
4-week minimum vacation
Work from home when you need to (role-specific)
Parental leave options for moms and dads
Customizable extended health benefits (including $2000 per year to spend on counseling)
Wellness programs including an onsite naturopath physiotherapist, and RMT (location-dependent), healthy snacks, and exercise classes
RRSP-matching

Leadership

Jack Newton

(CEO)

Experience as Director of Product Development for Chenomx Inc. from 2004 to 2009. Advisor for Logikcull.com, dealcloser, and Athennian.

Rian Gauvreau

(Board Member)

Experience developing legal technology for Gowling Lafleur Henderson LLP from 2000 to 2008. Graduated the University of British Columbia with an M.B.A. in Strategic Management in 2011.

Salary benchmarks

We don't have enough data yet to provide salary benchmarks for this role.

Submit your salary to help other candidates with crowdsourced salary estimates.

Share this job

View 74 more jobs at Clio