Application Security Developer, Clio

• This role is for someone who is passionate about building innovative solutions and being exposed to new challenges and technologies while making an impact
• Experience in Application or Product Security, with a focus on offensive security and penetration testing
• Hands-on expertise identifying and exploiting complex vulnerabilities (e.g., SSRF, Deserialization, logic bypasses)
• Proven ability to lead and conduct formal threat modeling sessions
• Strong proficiency in at least one major programming language (e.g., Python, .NET, Ruby, JavaScript)
• Experience securing applications in modern cloud environments (AWS, Azure, or GCP)
• Expertise with common application security tools and platforms (e.g., Burp Suite, SAST, SCA)
• Experience with log aggregation and SIEM technologies
• Ability to identify malicious behaviour and emerging threats via log analysis
• Demonstrate a keen interest in improving your craft by using AI

Desirable

• We are currently seeking an Application Security Engineer to join our rapidly growing Security team. The Application Security team is responsible for emulating real-world adversaries to proactively discover, exploit, and help remediate critical security vulnerabilities across our applications
• We provide a vital adversarial perspective, challenging our defences and partnering with development teams to eliminate flaws before they can be exploited
• Write, review, debug, and implement tools to help developers avoid security flaws
• Build partnerships with development teams and advise on security best practices
• Contribute to collective developer education by driving security awareness and knowledge amongst the product organization
• Provide detailed guidance and support to teams in vulnerability remediation, and develop frameworks, guidelines, and systematic fixes for recurring vulnerabilities
• Resolve issues, navigate ambiguity, and maintain positive working relationships with researchers in our Bug Bounty program
• Identify and implement tools for automated application scanning, static analysis and related tools
• Perform penetration testing, and offensive campaigns against internal assets
• Perform reactive incident response and forensics when a security event occurs
• Perform proactive research to detect new attack vectors
• Elevate and educate our security culture within Clio, contributing to our cultural values