Senior Application Security Developer

Clio - Cloud-Based Legal Technology

. Develop automation in internal tooling to ingest vulnerability sources, normalize finding data, and generate automated fix PRs .

Posted 11/5/2026full-timeCanadaSenior💰 CA$157,300 - CA$212,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in vulnerability management, secure software development, and automation of security workflows. Proficient in integrating AI tools to enhance security processes and improve operational efficiency.

Highest-signal resume keywords

Vulnerability ManagementSecure Software DevelopmentAutomation DevelopmentTechnical Security ExpertiseAI Integration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

RubyPythonJavaScriptVulnerability ScanningSAST ToolsInfrastructure-as-CodeCloud SecurityRoot-Cause AnalysisComplex Vulnerability RemediationData Aggregation Services

Soft Skills

Clear CommunicationTechnical GuidanceSecurity Advocacy

Tools & Technologies

OverlordAI Processing ToolsPenetration Testing ToolsBug Bounty PlatformsSecurity Scorecards

Industry Keywords

Web Application SecurityArchitecture ReviewThreat ModelingContinuous IntegrationSecurity Awareness

Tech Stack

Tools & technologies

CloudJavaScriptPythonRubySDLC

About the role

Key responsibilities & impact

Develop automation in internal tooling to ingest vulnerability sources, normalize finding data, and generate automated fix PRs
Own, operate, and extend the tooling and automation pipeline powering the vulnerability management lifecycle
Integrate dependency CVEs, SAST, secret scanning, penetration testing, bug bounty, and infrastructure-as-code findings into a unified pipeline
Provide technical guidance to development teams on security best practices and complex vulnerability remediation
Remediate complex or high-risk vulnerabilities directly in core codebases
Perform root-cause analysis to eliminate vulnerability classes
Integrate AI processing tools to streamline triage, assess reachability, and automate SDLC activities
Build data aggregation services and reporting dashboards for program health, SLA compliance, and security scorecards
Assist onboarding acquired and newly created entities and products into the central vulnerability pipeline
Partner with product engineering teams to drive vulnerabilities outside SLA to zero
Participate in incident response and continuous improvement
Grow security awareness and knowledge across the product organization

Requirements

What you’ll need

Senior-level experience in software development with languages such as Ruby, Python, JavaScript, or equivalent modern technologies
Demonstrated security expertise in vulnerability management, web application security, secure software development, cloud security, architecture review, or threat modeling
Proven ability to develop tools and automation that eliminate operational toil and streamline workflows
Clear communication skills to advise developers, explain complex security risks clearly, and advocate for security best practices
Proven track record of serving as a technical security expert and building creative, scalable security solutions in a fast-paced continuous integration environment deploying 50+ times a day
A keen interest in improving your craft using AI
Prior experience building automation on vulnerability scanners, SAST tools, or central vulnerability management platforms (e.g., Overlord)
Familiarity with container security, Infrastructure-as-Code (IaC) scanning, and cloud security posture tools
Experience with AI/LLM integration for automated triage and security workflows

Benefits

Comp & perks

Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
Hybrid work environment
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
Accessibility accommodations during the recruitment process