Senior Product Security Engineer

<p>CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 38 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.</p> <p>As a <strong>Senior Product Security Engineer</strong> on our Product Security team you’ll help run and evolve CLEAR’s vulnerability management program across cloud, infrastructure, endpoints, and applications. You’ll operate the tools that surface risk (like Wiz, Tenable, and Github), turn findings into clear, actionable work, and partner with engineering teams to drive down real-world risk. Not just tickets.</p> <p><em><strong>What you’ll do:</strong></em></p> <ul> <li>Monitor and triage findings from Wiz, Tenable, GHAS, and other scanners, ensuring issues are routed to the right owners with the right context and priority.</li> <li>Manage on our centralized VM platform that aggregates findings across Wiz, Tenable, GHAS, and other sources and ensure consistent normalization, deduplication, and ownership mapping (e.g., by AWS tags, teams, or services) so we have a single, trustworthy view of risk.</li> <li>Manage CLEAR’s risk scoring and SLA models (High/Critical, “Most Wanted” assets, ETC) within the VM platform and make sure we are tracking overdue findings, SLA adherence, backlog trends, and top risky assets/teams</li> <li>Work directly with code, cloud, and endpoint teams to clarify findings, group related issues, and translate scanner output into concrete remediation plans that fit their roadmaps.</li> <li>Partner with engineering to get fixes shipped </li> <li>Participate in regular triage / review sessions, help prioritize backlog items, and follow through to ensure high‑risk issues are validated and closed in the source tools (not just Jira).</li> <li>Contribute to VM process and tool improvements with enhancements to connectors, data quality checks, scorecards, runbooks, and how‑to guides so vulnerability management processes are repeatable and easy to onboard to.</li> </ul> <p><em><strong>How you’ll measure success:</strong></em></p> <ul> <li>Cleaner, more accurate vulnerability data with fewer duplicates and orphaned tickets; consistent mapping between scanner findings, Jira issues, and asset/ownership data across Wiz, Tenable, and other tools.</li> <li>Improved remediation outcomes with a reduction in High/Critical vulnerabilities out of SLA, especially on top-risk assets and services, and visible burn‑down in dashboards and scorecards.</