Partner with Product and Development teams to assess application architecture and perform penetration testing across web, mobile, and API environments
Document security vulnerabilities and clearly communicate findings; partner with teams to drive timely remediation
Support Security Impact Assessments in alignment with Clario's standard operating procedures and prioritization framework
Identify and evaluate risks across application code, infrastructure, and system configurations
Embed security practices within DevSecOps workflows, enabling teams to shift left without impacting development velocity
Build and maintain automation solutions to generate developer feedback, create remediation tasks, and trigger re-testing
Develop KPI dashboards and data solutions that surface security posture metrics across the organization
Prototype security tooling in collaboration with R&D and IT teams, incorporating AI/ML concepts where applicable
Integrate security tools through APIs to centralize vulnerability management and enable KPI reporting
Review internal and open-source code for vulnerabilities and provide actionable mitigation strategies
Promote secure coding standards through training, collaboration, and ongoing engagement with engineering teams

Bachelor's degree or equivalent experience in cybersecurity, computer science, or a related field
3–5 years of hands-on experience in application and network penetration testing (web, mobile, APIs)
Strong knowledge of application security frameworks such as OWASP ASVS and NIST, and secure SDLC practices
Experience with automated security testing tools including SAST, DAST, and SCA solutions
Proficiency with tools such as Burp Suite and vulnerability management platforms
Proven ability to perform security assessments and lead remediation discussions with development teams
Experience integrating security tools via APIs and implementing security automation
Proficiency in one or more scripting or programming languages such as Python, PowerShell, JavaScript, Java, or C#
Experience building dashboards, reporting tools, or data solutions for security use cases is a strong plus
Familiarity with tools and environments such as Kali Linux, Nmap, Swagger, Postman, and hybrid or cloud infrastructures
Exposure to AI/ML concepts in a security or engineering context is a plus

Cybersecurity Engineer

Key skills