Clear Street is a securities and derivatives brokerage firm that is gearing up for an IPO.
<p><span style="font-size: 12pt;"><strong>About Clear Street:<br></strong></span></p> <div><span style="font-size: 12pt;">Clear Street’s mission is to give every sophisticated investor access to every asset, in every market, through a unified platform built for speed, transparency and scale.</span></div> <div><br><span style="font-size: 12pt;">We give our clients the technology, tools, and service once reserved for the largest institutions, rebuilt with modern infrastructure. Our single, cloud-native, end-to-end capital markets platform powers investor growth today and is transforming how they can interact with markets tomorrow.</span><br><br></div> <div><span style="font-size: 12pt;">For more information, visit <a href="https://clearstreet.io/" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://clearstreet.io&source=gmail&ust=1766166763873000&usg=AOvVaw3GfALVHjsW8XaQSab-3CbX">https://clearstreet.io</a>.</span></div> <p class="p1"><span style="font-size: 12pt;"><strong>The Team:</strong></span></p> <p class="p1"><span style="font-size: 12pt;">As an application security engineer in the Security team, you’ll have the opportunity to problem solve, build and influence the security posture of our products and services across the product ecosystem. </span></p> <p class="p1"><span style="font-size: 12pt;">In this role specifically, you’ll be responsible for leading application security efforts with our engineers as part of the product development lifecycle at source code and cloud levels within DevSecOps, Vulnerability and other arenas. </span></p> <p><span style="font-size: 12pt;"><strong>Key Responsibilities:</strong></span></p> <p><span style="font-size: 12pt;">● Own security controls within CI/CD pipelines (SAST, DAST, SCA, secrets detection) and maintain pipeline-as-code tooling.</span><br><span style="font-size: 12pt;">● Work with engineers to identify and remediate vulnerabilities in application source code.</span><br><span style="font-size: 12pt;">● Manage the vulnerability lifecycle: triage findings from scanners, prioritize by risk, track remediation, and report on trends.</span><br><span style="font-size: 12pt;">● Lead cloud security efforts, work with engineering teams to enforce cloud security best practices (IAM, network controls, storage security, workload protection).</span><br><span style="font-size: 12pt;">● Maintain and tune security tooling including SAST/DAST scanners, container security platforms, and dependency analysis tools.</span><br><span style="font-size: 12pt;">● Build automation and AI based tools to scale Devsecops operations.</span><br><span style="font-size: 12pt;">● Partner with Infra Engineering teams to define secure infrastructure-as-code (IaC) standards and enforce them via policy-as-code.</span><br><span style="font-size: 12pt;">● Participate in threat modeling sessions and security design reviews for new features and services.</span><br><span style="font-size: 12pt;">● Support incident response activities related to application and cloud security events.</span><br><span style="font-size: 12pt;">● Contribute to security documentation, runbooks, and developer-facing guidance.</span><br><br><span style="font-size: 12pt;"><strong>Required Qualifications</strong></span><br><span style="font-size: 12pt;">● 7+ years of experience in a DevSecOps, application security, or cloud security engineering role.</span><br><span style="font-size: 12pt;">● Hands-on experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, or similar).</span><br><span style="font-size: 12pt;">● Proficiency with at least one major cloud provider (AWS, Azure, or GCP) and its native security services.</span><br><span style="font-size: 12pt;">● Experience with SAST/SCA tools (e.g., Semgrep, Snyk, Checkmarx, Veracode) and interpreting findings.</span><br><span style="font-size: 12pt;">● Working knowledge of container and Kubernetes security (image scanning, RBAC, network policies, admission control).</span><br><span style="font-size: 12pt;">● Scripting skills in Python, Bash, or similar for automation and tooling.</span><br><span style="font-size: 12pt;">● Familiarity with IaC tools (Terraform, CloudFormation, Pulumi) and policy frameworks (OPA/Rego, Checkov).</span><br><span style="font-size: 12pt;">● Understanding of OWASP Top 10, CWE, and common vulnerability classes.</span><br><span style="font-size: 12pt;">● Strong communication skills — able to explain security risk clearly to non-security audiences.</span></p> <p><span style="font-size: 12pt;">Your impact won't be measured by the number of servers you manage—it will be measured by how much faster and happier our engineers become.</span></p> <p><span style="font-size: 12pt;">The Base Salary Range is $175,000 - $210,000. These ranges are representative of the starting base salaries for this role at Clear Street. Which range a candidate fits into and where a candidate falls in the range will be based on job related factors such as relevant experience, skills, and location. These ranges represent Base Salary only, which is just one element of Clear Street's total compensation. The ranges stated do not include other factors of total compensation such as bonuses or equity.</span></p> <p><span style="font-size: 12pt;">At Clear Street, we offer competitive compensation packages, company equity, 401k matching, gender neutral parental leave, and full medical, dental and vision insurance. Our belief has always been that we are better as a busines