Founding Security Engineer

About Clay

Clay is a creative tool for growth. Our mission is to help businesses grow  — without huge investments in tooling or manual labor. We’re already helping over 100,000 people grow their business with Clay. From local pizza shops to enterprises like Anthropic and Notion, our tool lets you instantly translate any idea that you have for growing your company into reality. We’re looking for sharp, low-ego people to help us turn every business's creative ideas into a reality.  Check out our wall of love to learn more about the product.

Why is Clay the best place to work in New York?

• Customers love the product (100K+ users and growing)

• We’re growing a lot (6x YoY last year, and 10x YoY the two years before that)

• Incredible culture (our customers keep applying to work here)

• In-person work (beautiful office space in Flatiron)

• Well-resourced (raised a Series B expansion in Winter 2024 from investors like Sequoia and Meritech)

Clay is looking for its first dedicated Security Engineer. We’re looking for someone with a broad knowledge of security topics, that would be able to independently prioritize and address security needs, with the ability to deep dive and learn specific topics as the need arises, as well as build out internal tools as needed.
We’re looking for a senior level engineer with expertise in the following areas:
Cloud Security

• Experience securing cloud environments (e.g., AWS, Azure, Google Cloud).

• Familiarity with Identity and Access Management (IAM) in cloud settings.

• Experience with monitoring and mitigating network-level attacks (e.g., DDoS).

• Experience with key management (Secrets, credentials, etc…)

• Knowledge of infrastructure-as-code security tools (e.g., Terraform, AWS Config).

Application Security

• Familiarity with secure coding practices and common vulnerabilities (e.g., OWASP Top 10), as evaluated by penetration testing

• Experience conducting code reviews and identifying vulnerabilities.

• Familiarity with tools like static analysis (SAST), dynamic analysis (DAST), and dependency checks.

• Knowledge of authentication and access control mechanisms (e.g., OAuth, RBAC, MFA).

Office & employee Security

• Provisioning/de-provisioning of employee access

• Employee hardware security monitoring (e.g. managing software updates, etc)

• Corporate network security (e.g. 802.1X implementation, VPN access to Cloud resources, etc)

Incident Response and Threat Detection

• Experience setting up monitoring and alerting systems (e.g., SIEM tools).

• Knowledge of common attack vectors and tactics (e.g., phishing, malware, APTs).

• Hands-on experience with incident response, investigation, and remediation.

Regulatory Compliance and Best Practices

• Awareness of relevant industry standards (e.g., ISO 27001, SOC 2, GDPR, HIPAA).

Life @ Clay 

Based out of a central office on 19th Street in Manhattan's Flatiron District. We love the energy of in-person collaboration while also offering the flexibility to work from home when needed.

• Competitive salary and role trajectory: Roles, responsibilities, and comp grow as we do

• Health insurance: Fully funded, high quality health, dental & vision coverage (including 80-100% therapy coverage)

• Visa sponsorship: We get it - it's an arduous process, but we're not scared of it

• Paid time off: We expect team members to take at least 3 weeks fully-disconnected per year, with a flexible vacation policy beyond that

• Free lunch: Lunch is provided in office every day

• Parental leave & fertility support: IVF fertility benefits, egg freezing, and 4 months of paid parental leave

Learn more about Clay and what it’s like to work with us right here!