[Hiring] Senior Security Engineer @Clever

As a security engineer at Clever, you’ll be part of a small highly collaborative team that leads the efforts to secure our service, infrastructure, organization and protect our customers' data. We are looking for someone who understands how to scale application security efforts at a growing organization.

 

A DAY IN THE LIFE:

By joining the Security team, you will become part of a integral part of our products by securing customer data and improving security posture by working on projects like:

• Security reviews, where you provide risk-based security subject matter expertise to our product and engineering teams
• Vulnerability detection, remediation, and preventing - find and fix vulnerabilities in our application code
• Collaborate with engineering teams in designing and developing security-sensitive code, including identity and authentication protocol code 
• Review third party tools used by the company to ensure that these tools are compliant with our security practices for the data they will host and process
• Ensuring that engineering systems are compliant with appropriate privacy laws and collaborating with legal team to establish privacy practice
• Infrastructure tooling to automate security for Clever services
• Triage and own remediations to submission to our bug bounty program
• Representing Clever in the security community to stay updated on vulnerabilities and threats
• Training engineers about secure coding practices and promote security in the company
•  Responsible for helping stay compliant with all of our relevant compliance regimes like GDPR, CCPA, FERPA, COPPA. Along with support efforts to be SOC2 Type 2 compliant.

We are focused on making sure we create systems and processes that allow all of Clever to create great products for teachers, students, guardians and district administrators ensuring that the data that we are custodians of are well protected.  We use many AWS services (AWS WAF, IAM, Dynamo, Systems Manager Parameter Store, Route53, Cloudfront). We write frontend code in Node.js, TypeScript, and React and use Go for backend. These are some of the tools you will learn working in the security team and not something you need to know to join us.

 

WHAT WE’RE LOOKING FOR:

• 3+ years of experience as a Software Engineer
• Strong fundamentals in software engineering and experience building applications
• Familiar with common security flaws, common security libraries and security controls for web applications in a public cloud environment
• Experience working cross-functionally with engineering teams reviewing code, architecture and design to provide security risk evaluation and mitigations
• Clever believes that the classrooms we serve and our company’s halls should be spaces that are diverse, equitable, and inclusive. We seek opportunities and celebrate actions that further allow us to build diverse teams, include every voice, and create a safe space for everyone to bring their authentic selves into the workplace. Outside of our walls, we use our collective influence, passionate work, and community involvement to unlock learning for ALL students.

 

CLEVER BENEFITS AND PERKS:

• A competitive salary
• Unlimited Paid Time Off
• Paid Parental Leave
• Top-notch healthcare, vision, and dental coverage for you and your family
• Best-in-class mental healthcare service that supports employees' mental and emotional wellness
• A generous personal development yearly budget which can be used for courses, conferences, trainings, books, and more
• LinkedIn Learning subscription with unlimited access to thousands of expert-led online courses
• Annual company retreats and quarterly team events to connect with fun, bright coworkers

 

SALARY TRANSPARENCY:

The range of our base salary cash compensation for this role for candidates living in the United States, besides NYC and San Francisco, CA, is between $166,815 - $198,000. For candidates living in NYC and San Francisco, CA is between $185,350 - $220,000. All final offers are determined using multiple factors including experience and level of expertise.