About the Role
The Application Security team is responsible for emulating real-world adversaries to proactively discover, exploit, and help remediate critical security vulnerabilities across our applications. We provide a vital adversarial perspective, challenging our defences and partnering with development teams to eliminate flaws before they can be exploited. This role is for someone who is passionate about building innovative solutions and being exposed to new challenges and technologies while making an impact.
Responsibilities
- Write, review, debug, and implement tools to help developers avoid security flaws
- Build partnerships with development teams and advise on security best practices
- Contribute to collective developer education by driving security awareness and knowledge amongst the product organization
- Provide detailed guidance and support to teams in vulnerability remediation, and develop frameworks, guidelines, and systematic fixes for recurring vulnerabilities
- Resolve issues, navigate ambiguity, and maintain positive working relationships with researchers in our Bug Bounty program
- Identify and implement tools for automated application scanning, static analysis and related tools
- Perform penetration testing, and offensive campaigns against internal assets
- Perform reactive incident response and forensics when a security event occurs
- Perform proactive research to detect new attack vectors
- Elevate and educate our security culture within Clio, contributing to our cultural values
Requirements
- Experience in Application or Product Security, with a focus on offensive security and penetration testing
- Hands-on expertise identifying and exploiting complex vulnerabilities (e.g., SSRF, Deserialization, logic bypasses)
- Proven ability to lead and conduct formal threat modeling sessions
- Strong proficiency in at least one major programming language (e.g., Python, .NET, Ruby, JavaScript)
- Experience securing applications in modern cloud environments (AWS, Azure, or GCP)
- Expertise with common application security tools and platforms (e.g., Burp Suite, SAST, SCA)
- Experience with log aggregation and SIEM technologies
- Ability to identify malicious behaviour and emerging threats via log analysis
- Demonstrate a keen interest in improving your craft by using AI
- Security certifications such as OSCP or OSWE
- Active participation in the security community (e.g., presenting at conferences, contributing to open-source tools)
- Experience with Ruby on Rails, Puppet, Kubernetes, Terraform, ELK (Elastic, Logtash and Kibana)
- Strong AWS security experience on EC2 and managed services
- Infrastructure security (WAF, ACLs, authentication, device hardening)
Skills
- Application Security
- Product Security
- Offensive Security
- Penetration Testing
- Vulnerability Identification
- Vulnerability Exploitation
- Threat Modeling
- Python
- .NET
- Ruby
- JavaScript
- Cloud Security (AWS, Azure, GCP)
- Burp Suite
- SAST
- SCA
- Log Analysis
- SIEM Technologies
- AI
Location
- Canada (excluding Quebec)
- Burnaby
- Calgary
- Toronto
- Vancouver
- Dublin
- London
- New York City
- Sydney
- Barcelona
- Bogotá
Work Type
- Hybrid
Experience Level
- Mid-level
- Senior
Salary/Compensations
- $116,500 to $137,000 to $157,500 CAD
Benefits
- Competitive, equitable salary
- Top-tier health benefits
- Dental insurance
- Vision insurance
- Flexible time off policy (20 days encouraged)
- $2000 annual counseling benefit
- RRSP matching
- RESP contribution
- Clioversary recognition program
About the Company
- Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.
- We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.
- We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations.
- Clio is on a mission to transform the legal experience for all.
- Clio is the global leader in legal AI, building the platform that powers the future of legal work.
- With the scale, data, and ambition to redefine how the legal industry operates, we are advancing a comprehensive strategy that spans the full lifecycle of legal work—from knowledge and insight to execution and outcomes.
- At the center of this vision is the Intelligent Legal Work Platform, the legal industry’s first System of Action.
- By combining Clio’s core product suite with Clio Work and AI-native capabilities, the platform turns information into insight and insight into action.
- As we expand into the enterprise, Clio for Enterprise extends this foundation to support the complexity, scale, and operational rigor of global organizations through solutions like Clio Operate and Vincent by Clio.
- Backed by industry-leading data and intelligence, Clio is building the infrastructure that enables legal teams to operate with greater speed, confidence, and impact.
- Clio’s leadership and momentum have been recognized globally.
- In 2022, we achieved Centaur status, a milestone reached by fewer than 200 private SaaS companies worldwide.
- We are a proud honoree of the Forbes Cloud 100 and Fortune’s Future 50, have been named Innovator of the Year, and are a Platinum Club member of Canada’s Best Managed Companies.
- We are consistently recognized as one of Canada’s Top 100 Employers and a Top Employer for Young People, with our international offices also earning placements on Great Place to Work’s Best Workplaces lists.
- Headquartered in Vancouver, Canada, Clio has grown to more than 2,000 employees across offices in Toronto, Calgary, Dublin, Manchester, Sydney, Barcelona, and Bogotá—bringing together diverse perspectives to solve one of the world’s most complex and impactful professional challenges.
- Join Clio and help define the future of legal work through AI.
- Learn more at clio.com/careers.
Equal Opportunity
- Our team shows up as their authentic selves, and are united by our mission.
- We are dedicated to diversity, equity and inclusion.
- We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from.
- We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation.
- We are committed to equal employment and we encourage candidates from all backgrounds to apply.
- Clio provides accessibility accommodations during the recruitment process.
- Should you require any accommodation, please let us know and we will work with you to meet your needs.
