Application Security Engineer - Offensive Security & Cloud Defender

Themis Solutions Inc.; Canada; Hybrid; CAD 119,000 - 161,000; Full time

Benefits offered by this job

Health benefits

Dental & Vision insurance

Hybrid work model

20 days off per year

RRSP matching

RESP contribution

Job summary

Clio is seeking an Application Security Engineer to join our Security team across Canada (excluding Quebec). In-office Anchor Days are expected for Burnaby, Calgary, or Toronto hubs.

You will write and review security tooling, partner with developers on security best practices, and drive security education across the product org. You will lead vulnerability remediation, perform pen tests, and execute proactive security research while collaborating with Bug Bounty researchers.

Qualifications

• Experience in Application Security with a focus on offensive security and penetration testing.
• Hands-on expertise identifying and exploiting complex vulnerabilities (e.g., SSRF, Deserialization, logic bypasses).
• Proven ability to lead and conduct formal threat modeling sessions.
• Experience securing applications in modern cloud environments (AWS, Azure, or GCP).
• Expertise with common application security tools and platforms (e.g., Burp Suite, SAST, SCA).
• Experience with log aggregation and SIEM technologies.
• Ability to identify malicious behaviour and emerging threats via log analysis.
• Demonstrate a keen interest in improving your craft by using AI.

Responsibilities

• Write, review, debug, and implement tools to help developers avoid security flaws.
• Build partnerships with development teams and advise on security best practices.
• Drive security awareness and knowledge amongst the product organization.
• Provide detailed guidance and support to teams in vulnerability remediation, and develop frameworks for recurring vulnerabilities.
• Collaborate with researchers in our Bug Bounty program and coordinate remediation.
• Identify and implement tools for automated application scanning, static analysis and related tools.
• Perform penetration testing and offensive campaigns against internal assets.
• Conduct reactive incident response and forensics when security events occur.
• Perform proactive research to detect new attack vectors.
• Elevate and educate our security culture within Clio.

Skills

Offensive security

Penetration testing

Threat modeling

Cloud security (AWS/Azure/GCP)

Security tools (Burp Suite, SAST, SCA)

Log analysis & SIEM

AI in security

Tools

Burp Suite

SAST

SCA

Elastic (ELK)

Kubernetes

Terraform

Job description

Clio is seeking an Application Security Engineer to join our Security team across Canada (excluding Quebec). In-office Anchor Days are expected for Burnaby, Calgary, or Toronto hubs.

You will write and review security tooling, partner with developers on security best practices, and drive security education across the product org. You will lead vulnerability remediation, perform pen tests, and execute proactive security research while collaborating with Bug Bounty researchers.