1 day ago
Remote, Canada +3 moreSenior
Responsibilities
- Develop internal automation tooling across the vulnerability management pipeline, from finding ingestion through automated remediation.
- Integrate dependency CVEs, SAST, secret scanning, penetration testing, bug bounty, vulnerability disclosure, and cloud posture or infrastructure-as-code findings into a unified pipeline.
- Build AI-driven processing for triage, vulnerability description formalization, severity assignment, reachability assessment, and fix-confidence grading.
- Build data pipeline services, dashboards, and Security Scorecards tracking remediation performance, SLA compliance, and dependency hygiene.
- Provide technical guidance to development teams and remediate complex or high-risk vulnerabilities directly in core codebases.
- Perform root-cause analysis to eliminate vulnerability classes and assist with onboarding acquired and newly created entities and products.
- Partner with product engineering teams to drive vulnerabilities outside SLA to zero and improve security awareness.
- Participate in incident response and contribute to continuous improvement of security processes.
Requirements
- Senior-level software development experience with Ruby, Python, JavaScript, or equivalent modern technologies.
- Demonstrated expertise in vulnerability management, web application security, secure software development, cloud security, architecture review, or threat modeling.
- Proven ability to develop automation and tools that eliminate operational toil and streamline workflows.
- Ability to communicate clearly with developers, explain complex security risks, and advocate for secure development practices.
- Track record as a technical security expert building creative, scalable security solutions in a fast-paced continuous integration environment deploying more than 50 times per day.
- Interest in improving software development and security craft using AI.
- Bonus: experience automating vulnerability scanners, SAST tools, or central vulnerability management platforms such as Overlord.
- Bonus: familiarity with container security, infrastructure-as-code scanning, cloud security posture tools, or AI/LLM integration for automated triage and security workflows.
Benefits
- Competitive salary with top-tier health, dental, and vision insurance.
- Hybrid work environment; candidates across Canada excluding Quebec, with local hub employees expected in office two days per week for Anchor Days.
- Flexible time off policy with an encouraged 20 days off per year.
- $2,000 annual counseling benefit.
- RRSP matching and RESP contribution.
- Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years.
- Accessibility accommodations are available during the recruitment process.
Tech Stack
Categories
About Clio
Clio builds cloud-based legal practice management and client intake software for law firms, sold by subscription with integrated payments. Its products include Clio Manage, Clio Grow, and tools for time tracking, billing, document and case management. Founded in 2008 and headquartered in Burnaby, BC, Clio says it serves customers in 130+ countries and is approved by over 100 bar associations and law societies.