Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely. We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice. If you are local to one of our hubs (Burnaby, Calgary, or Toronto) you will be expected to be in office two days per week for our Anchor Days. Clio is looking for a Senior Application Security Developer to join the Vulnerability Management Program within the Application Security Team. As a Senior Developer, you will bring solid software development experience combined with deep domain expertise in application security and vulnerability management to architect and build tools that reduce toil, automate vulnerability discovery, drive automated remediation, and partner with product teams across Clio. In this role, you will help own, operate, and extend the tooling and automation pipeline, including our custom internal security tooling, that powers our vulnerability management lifecycle, covering dependency CVEs, SAST, secret scanning, pentest findings, bug bounty, and infrastructure-as-code. You will collaborate closely with other subteams across Security and Engineering, helping integrate vulnerability sources, refine triage quality, prove reachability, and enable development teams to drive open vulnerabilities to zero past SLA. Risk-based prioritization: Risk and exploitability determine sequencing so development teams focus on what is reachable and actionable Developing automation in internal tooling to ingest new vulnerability sources, normalize finding data, and generate automated fix PRs for all vulnerabilities Using state-of-the-art AI tooling (Claude Mythos, Daybreak)



Partnering with development teams to advise on security best practices, provide guidance on complex vulnerability remediations, or write root-cause fixes directly in core codebases Integrating AI processing tools to streamline triage, assess reachability, and automate all aspects of the SDLC Building data aggregation services and reporting dashboards to measure program health, SLA compliance, and security scorecards across product teams Participating in incident response when a security event occurs and contributing to a strong culture of continuous improvement Develop and implement automation tooling within our internal tooling to eliminate toil across the vulnerability pipeline — from ingestion to automated remediation Integrate multiple finding sources into a single unified pipeline, including dependency CVEs, SAST & secret scanning, penetration testing, vulnerability disclosures/bug bounty, and cloud posture/IaC findings Expand AI-driven processing capabilities for triage, bug description formalization, severity assignment, and fix confidence grading Build data pipeline services for the Security Scorecard, tracking team-by-team remediation performance, SLA compliance,



and dependency hygiene Provide detailed technical guidance and support to development teams during vulnerability remediation Remediate complex or high-risk vulnerabilities directly in core codebases when automation cannot close the gapPerform root-cause analysis across finding patterns to help eliminate entire vulnerability classes rather than just individual instances Assist with onboarding acquired and newly created entities and products into the central pipeline and vulnerability program Grow security awareness and knowledge amongst the product organization Assist incident response when a security event occurs Elevate and educate our security culture within Clio, exemplifying our values of “Velocity Wins” and “Get Better Every Day” Senior-level experience in software development with languages such as Ruby, Python, JavaScript, or equivalent up-to-date technologies Demonstrated security expertise in vulnerability management, web application security, secure software development, cloud security, architecture review, or threat modeling Clear communication skills to advise developers, explain complex security risks clearly, and advocate for security best practices Proven track record of serving as a technical security expert and building creative, scalable security solutions in a fast-paced continuous integration environment deploying 50+ times a day A keen interest in improving your craft using AI Bonus Points Prior experience building automation on vulnerability scanners, SAST tools, or central vulnerability management platforms (e.g., Familiarity with container security, Infrastructure-as-Code (IaC) scanning, and cloud security posture tools Experience with AI/LLM integration for automated triage and security workflows We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture. Competitive, equitable salary with top-ti

📌 Senior Application Security Developer (Vancouver)
🏢 Clio
📍 Vancouver