Intermediate Developer in Application Security at Clio, a legal AI leader. Build innovative solutions and collaborate with teams to prevent security vulnerabilities.
Responsibilities
Bring strong development experience to the Application Security Team;
Develop and implement tools to help educate, reduce toil, and prevent security flaws;
Provide detailed guidance and support to teams in vulnerability remediation along with remediating vulnerabilities in core codebases;
Build partnerships with development teams and advise on security best practices;
Contribute to growing security awareness and knowledge amongst the product organization
Identify, improve, and implement tools for automated application scanning, static analysis, and custom tooling;
Perform incident response when a security event occurs;
Elevate and educate our security culture within Clio, contributing to our cultural values of “Lead with Context” and “Get Better Every Day”.
Requirements
2+ years experience with Ruby, Python, Javascript or other equivalent modern languages and tools.
Experience in some combination of the following disciplines: secure software development, architecture review, web application security, security tools development, cloud security, and/or threat modelling.
Demonstrate a keen interest in improving your craft by using AI.
Benefits
Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin and Sydney) to be in office min. twice per week.
Flexible time off policy, with an encouraged 20 days off per year.
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
Security director at Intact, an insurer, protecting customer and broker digital channels and third - party risk platforms. Leading technical teams, governance, strategy, and security operations.
Information Security Advisor conducting cyber - risk assessments and contract reviews for Sun Life, a global financial - services company. Advising business and technology teams on security controls, compliance, and risk remediation.
Enterprise Security Architect securing technology for Vancity, a member - owned Canadian credit union. Designing enterprise application security frameworks, controls, and risk - based cybersecurity solutions.
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.