Clio
Senior Application Security Developer
Security Intel
Calgary, Alberta, Canadainformation technology & servicesPosted 9 months agoVerified 4d ago
“Ensure software security by finding and fixing vulnerabilities.”
View Job
Clio Security Team
Open security roles at Clio, and what we know about the team behind them.
information technology & services · 2300 employees · 6 open roles. Updated October 15, 2026.
Open roles (6)
Clio
Application Security Developer
Security Intel
Toronto, Ontario, Canadainformation technology & servicesPosted 9 months agoVerified 5d ago
“Ensure software security by finding and fixing vulnerabilities.”
View Job
Clio
Senior Application Security Developer
Security Intel
Toronto, Ontario, Canadainformation technology & servicesPosted 10 months agoVerified 5d ago
“Ensure software security by finding and fixing vulnerabilities.”
View Job
Clio
Manager, Application Security
Security Intel
4 Locationsinformation technology & servicesPosted Date unknownVerified 5d ago
“Ensure software security by finding and fixing vulnerabilities.”
View Job
Clio
Software Developer, Application Security
Security Intel
3 Locationsinformation technology & servicesPosted Date unknownVerified 5d ago
“Ensure software security by finding and fixing vulnerabilities.”
View Job
Clio
Software Development Manager - Application Security
Security Intel
2 Locationsinformation technology & servicesPosted Date unknownVerified 6d ago
“Ensure software security by finding and fixing vulnerabilities.”
View Job
Security at Clio
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
How they approach application security
- Clio's stated AppSec mission is to ensure software security by finding and fixing vulnerabilities.
- Their approach to working with developers emphasizes enablement, with efforts to write, review, debug, and implement tools to help developers avoid security flaws.
- Clio's security policy dictates ASAP fixes for high severity issues, 3 business days for medium, and 3 weeks for low.
- Stated programs include a private bug bounty program and annual penetration tests conducted by a leading cybersecurity firm.
The team
Clio's security function is broken into teams including Application security, Security engineering, Product security, and Security compliance. Aravind Sreenivasa is identified as a public-facing leader, holding the title of Manager, Application Security at Clio. The total AppSec team size is not publicly available. As of, there is 1 active AppSec job posting (Application Security Developer, posted). Common skill and tool patterns observed from job postings and developer documentation include Burp Suite, SAST, SCA, static code analysis, AWS, and scripting (Python/.NET/JavaScript).
What they're working on
No public evidence was found for a Security Champions Program. Clio practices 'Shift Left' by identifying and implementing tools for automated application scanning and using security scanners and automated code analysis tools. Their vulnerability management process includes intake via a private bug bounty program and a responsible disclosure page to report potential vulnerabilities. Remediation SLAs dictate ASAP fixes for high severity issues, 3 business days for medium, and 3 weeks for low, with the team providing detailed guidance and support for remediation. Secure SDLC artifacts include leading and conducting formal threat modeling sessions and regular penetration tests. Recent initiatives (last 6 months) include an active job posting for an Application Security Developer and security page updates referencing a private bug bounty and SOC 2 reports.