Manager of Application Security, Clio
CA$172-258k
Please note there are a separate set of salary bands for other regions based on local currency
More information about location
Legal practice management software
Be an early applicant
Legal practice management software
1001+ employees
Be an early applicant
CA$172-258k
Please note there are a separate set of salary bands for other regions based on local currency
More information about location
1001+ employees
Company mission
Clio's mission is to build cloud-based and client-centred technology that will transform the legal experience for all.
Role
Who you are
- Experienced security leader with software development background
- Experience working with full-stack developers
- Security certifications like OSCP, OSWE, etc
- Prior experience with Ruby, Rails, Python, and/or Django applications
What the job involves
- We are currently seeking a Manager, Application Security to join our rapidly growing Application Security team at Clio
- This role is for someone who is passionate about building scalable security solutions and being exposed to multiple challenges and technologies while making a massive impact on the legal industry
- The Application Security team is responsible for securing Clio’s applications, developers, and codebase. We work hard to enable our developers to ship secure software at scale while being an empathetic, collaborative team, focused on context and iterating towards secure solutions
- We find and fix code-level vulnerabilities, in addition to building internal security tooling, deploying code scanning tools, threat modeling, and vulnerability remediation. If you're passionate about security and working on innovative solutions with a modern approach, we should definitely chat!
- Hire, mentor, and grow a team of Offensive Application Security engineers
- Define the long-term roadmap for the offensive security team
- Collaborate with other Clio teams to help develop products or features leveraging secure development practices
- Lead security incidents, recovery, and remediation efforts, along with post-incident forensics
- Participating in due diligence during acquisitions to assess product and organizational security postures
- Triaging and administering our Bug Bounty program
- Code framework level solutions to provide blessed path tooling for developers and proactively prevent security flaws
- Drive security awareness and knowledge amongst the product organization
- Provide detailed guidance and support to teams in vulnerability remediation
- Build, write rules, and implement tools for automated application scanning, static analysis and custom tooling
- Perform penetration testing and proactive research to detect new attack vectors
- Perform reactive incident response and remediation when a security event occurs
- Project manage effectively by motivating the team, ensuring they meet and exceed targeted goals and objectives
- Elevate and educate our security culture within Clio, contributing to our cultural values of “Win and Help Win” and “Get Better Every Day;"
Our take
Modern law firms increasingly manage their work digitally but the lack of a specialised remote solution means that workflows have become fragmented. This leads to legal practice managers having to juggle multiple software solutions across various devices.
Clio provides a legal practice management platform designed for law firms, allowing users to manage billing for legal aid cases, access and manage documents and store files across multiple devices. Whilst other startups are operating in this niche, Clio has uniquely focussed on synchronisation across remote devices and on a wide range of integrations, allowing the user to access information from other industry standard software such as Xero and Klyant from within a single interface.
Clio has raised a large amount of investment capital, most recently in a 2021 Series E round which saw the company attain unicorn status with a valuation exceeding $1 billion. This funding is being used to accelerate its product development, hire additional talent, and for expansion into new markets with a focus on the EMEA region, particularly the UK and Ireland.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Company equity
- $500 contribution when you become a parent and/or guardian
- 4-week minimum vacation
- Work from home when you need to (role-specific)
- Parental leave options for moms and dads
- Customizable extended health benefits (including $2000 per year to spend on counseling)
- Wellness programs including an onsite naturopath physiotherapist, and RMT (location-dependent), healthy snacks, and exercise classes
- 401k 🇺🇸
- RRSP-matching 🇨🇦
Company values
- Giving Back - we’re committed to creating positive social change in the community
- Creating Better Work Environments - we believe that a diverse and inclusive culture is a competitive advantage that benefits both our employees and customers
- Thriving as a Team - we live by seven core values on how to thrive, have fun, and win as a team
Articles
Leadership
Jack Newton
(CEO)Experience as Director of Product Development for Chenomx Inc. from 2004 to 2009. Advisor for Logikcull.com, dealcloser, and Athennian.
Rian Gauvreau
(Board Member)Experience developing legal technology for Gowling Lafleur Henderson LLP from 2000 to 2008. Graduated the University of British Columbia with an M.B.A. in Strategic Management in 2011.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 73 more jobs at Clio