Senior Security Engineer

Clever is on a mission to connect every student, worldwide, to a world of learning. With our identity platform for education, we serve 77% of U.S. schools and over 1 million K12 students internationally. As a trusted partner for schools and educators, we provide secure, seamless access to digital learning tools that empower students everywhere. Clever, a Kahoot! Company, is headquartered in San Francisco, CA, but our impact extends far beyond. Learn more about us at www.clever.com.

As a security engineer at Clever, you’ll be part of a small highly collaborative team that leads the efforts to secure our service, infrastructure, organization and protect our customers' data. We are looking for someone who understands how to scale application security efforts at a growing organization. 

A DAY IN THE LIFE:

By joining the Security team, you will become part of an integral part of our products by securing customer data and improving security posture by working on projects like:

• Security reviews, where you provide risk-based security subject matter expertise to our product and engineering teams
• Vulnerability detection, remediation, and preventing - find and fix vulnerabilities in our application code
• Collaborate with engineering teams in designing and developing security-sensitive code, including identity and authentication protocol code 
• Review third party tools used by the company to ensure that these tools are compliant with our security practices for the data they will host and process
• Ensuring that engineering systems are compliant with appropriate privacy laws and collaborating with legal team to establish privacy practice
• Infrastructure tooling to automate security for Clever services
• Triage and own remediations to submission to our bug bounty program
• Representing Clever in the security community to stay updated on vulnerabilities and threats
• Training engineers about secure coding practices and promote security in the company
• Responsible for helping stay compliant with all of our relevant compliance regimes like GDPR, CCPA, FERPA, COPPA. Along with support efforts to be SOC2 Type 2 compliant

We are focused on making sure we create systems and processes that allow all of Clever to create great products for teachers, students, guardians and district administrators ensuring that the data that we are custodians of are well protected.  We use many AWS services (AWS WAF, IAM, Dynamo, Systems Manager Parameter Store, Route53, Cloudfront). We write frontend code in Node.js, TypeScript, and React and use Go for backend. These are some of the tools you will learn working in the security team and not something you need to know to join us.

WHAT WE’RE LOOKING FOR:

• 4+ years of experience as a security engineer or software engineer with demonstrable security experience
• Solid foundation in software engineering principles and proven experience in building applications
• In-depth knowledge of common security vulnerabilities, standard security libraries, and security controls for web applications within a public cloud environment
• Experience collaborating with engineering teams to conduct code reviews, architecture assessments, and design evaluations to identify and mitigate security risks
• Excellent communication skills and influential leadership skills
• The desire and ability to mentor and support engineers at all levels of experience
• Commitment to inclusion and belonging: Clever believes that the classrooms we serve and our company’s halls should be spaces that are diverse and inclusive. We seek opportunities and celebrate actions that further allow us to build diverse teams, include every voice, and create a safe space for everyone to bring their authentic selves into the workplace

CLEVER BENEFITS AND PERKS:

• A competitive salary
• Flexible Paid Time Off
• Paid Parental Leave
• Top-notch healthcare, vision, and dental coverage for you and your family
• Best-in-class mental healthcare service that supports employees' mental and emotional wellness
• A generous personal development yearly budget which can be used for courses, conferences, trainings, books, and more
• A comprehensive Learning & Development program that enables employees to enhance their skills, knowledge, and functional expertise
• Annual company and team events to connect with fun, bright coworkers

SALARY TRANSPARENCY:

The range of our base salary cash compensation for this role for candidates living in the United States, besides