Application Security Manager, Clio

• This role is for someone who is passionate about building scalable security solutions and being exposed to multiple challenges and technologies while making a massive impact on the legal industry
• If you're passionate about security and working on innovative solutions with a modern approach, we should definitely chat!
• We’d love to have you apply, even if you don't feel you meet every single requirement in this posting

Desirable

• We are currently seeking a Software Development Manager to join our rapidly growing Application Security team at Clio
• The Application Security team is responsible for securing Clio’s applications, developers, and codebase
• We work hard to enable our developers to ship secure software at scale while being an empathetic, collaborative team, focused on context and iterating towards secure solutions
• We find and fix code-level vulnerabilities, in addition to building internal security tooling, deploying code scanning tools, threat modeling, and vulnerability remediation
• A day in the life might look like:
• Hire, mentor, and grow a team of Offensive Application Security engineers
• Define the long-term roadmap for the offensive security team
• Collaborate with other Clio teams to help develop products or features leveraging secure development practices
• Lead security incidents, recovery, and remediation efforts, along with post-incident forensics
• Participating in due diligence during acquisitions to assess product and organizational security postures/
• Triaging and administering our Bug Bounty program
• This role will code framework level solutions to provide blessed path tooling for developers and proactively prevent security flaws
• Drive security awareness and knowledge amongst the product organization
• Provide detailed guidance and support to teams in vulnerability remediation
• Build, write rules, and implement tools for automated application scanning, static analysis and custom tooling
• Perform penetration testing and proactive research to detect new attack vectors
• Perform reactive incident response and remediation when a security event occurs
• Project manage effectively by motivating the team, ensuring they meet and exceed targeted goals and objectives
• Elevate and educate our security culture within Clio, contributing to our cultural values of “Win and Help Win” and “Get Better Every Day”