Security Engineering Manager

Join Clio, a leading legal technology company, as a Security Engineering Manager. In this role, you will lead a team of engineers, drive technical solutions to improve Clio's security posture, and actively participate in the development process. You will have the opportunity to work in a hybrid model, with a minimum of two days in the office if you are located in one of our Canadian hubs. Clio offers a range of benefits, including equitable compensation, company equity, flexible paid time off, and various health and wellness programs.

• Support and grow your team, ensuring strong execution and building solid technical solutions.
• Drive remediation of cloud/infra vulnerabilities and produce audit evidence to maintain authorizations.
• Collaborate with your team and other engineering groups to identify opportunities and craft a roadmap.
• You devise roadmaps to guide your team, but aren't beholden to them -- you easily adapt to a constantly changing world
• Experience owning a security-compliance program (FedRAMP / StateRAMP / GovRAMP / SOC 2) – audit evidence, continuous monitoring, etc
• Demonstrated ability to hire the best and brightest engineers in a fast-paced job market—and to coach, develop, and retain engineering talent; You are equally energized by both your own technical work as well as contributing to the career growth of your team
• Adept with Terraform + GitOps (Flux/Argo) + Kustomize; KEDA-based autoscaling
• Skilled in securing cloud infrastructure such as AWS, GCP/GSuite, GitHub, and IdP, including experience with AWS and/or GCP
• Diverse base of knowledge that allows you to help your team solve complex technical problems
• Demonstrated success in people leadership in software development, particularly with large scale SaaS products, and a strong background in cloud computing and cloud security
• You have strong opinions that are weakly held, and foster that same attitude in others
• You believe in providing honest, actionable feedback to your team, and encourage your team to reciprocate
• A philosophy on what makes for great software development teams
• Strong AWS security experience on EC2 and managed services
• Strong understanding of threat vectors, IOCs, malicious behaviour identification, and threat analysis
• Operating a logging/SIEM platform (ELK/OpenSearch/Splunk) at scale and across multiple regions
• Experience with Ruby (on Rails), or Python