5 months ago
San Francisco, CA, USA or New York, NY, USASenior / Staff+
H1B sponsor
Base Salary
$225k - $300k/yr
Responsibilities
- Build security primitives, tooling, automation, detection systems, remediation pipelines, and frameworks that scale with the product and engineering organization.
- Define and implement AI-assisted vulnerability discovery, automated code review, threat detection, and remediation workflows.
- Partner with Infrastructure and Product Engineering to establish secure defaults.
- Own security projects end to end, including design, implementation, rollout, and measurement.
- Secure cloud infrastructure through IAM, network policies, container security, secrets management, least-privilege access, and misconfiguration prevention.
- Improve cloud visibility and control using infrastructure-as-code and cloud security tooling.
- Lead secure design and coding practices, architecture reviews, code-level security reviews, and hands-on remediation.
- Own vulnerability discovery and validation across static and dynamic analysis, dependency checks, penetration tests, and bug bounties.
- Build security agents and automated workflows that scan codebases, propose fixes, and may autonomously deploy security patches.
- Build reusable authentication, authorization, and secure-by-default frameworks and define controls for code-generation tools and coding-agent changes.
Requirements
- Strong software engineering fundamentals and a track record of shipping production systems.
- Deep expertise in either Cloud Security or Application Security, with working ability across the adjacent domain.
- Ability to build and ship concrete engineering solutions rather than only provide security advice.
- Ability to work comfortably with ambiguity and define security practices from first principles.
- Interest in using modern automation and AI to scale security operations while maintaining engineering rigor.
About Clay Labs
Clay Labs builds a go-to-market data and automation platform that lets revenue teams discover prospects, enrich records from many providers, and personalize multichannel outreach. Delivered as a SaaS product with APIs and a data marketplace, it serves sales, marketing, and growth teams at startups and enterprises. The privately held company is headquartered in New York and is backed by investors including Sequoia Capital and CapitalG.