{"id":2444781,"url":"https://alion.io/job/clio-software-development-manager-application-security","title":"Software Development Manager - Application Security","company":{"id":5273,"name":"Clio","domain":"clio.com","url":"https://alion.io/company/clio","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Management","role_family":"Management","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom","Dublin, Ireland"],"countries":["GB","IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":104000,"max":156000,"currency":"GBP","period":"year","gross":null,"usd_annual":206180},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Claude","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"Red Teaming","optional":false},{"name":"AWS","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-13T13:14:47Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T17:47:10Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.\nWe are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.\nSummary:\nThe Role\nClio is building an agentic Security Operations Center. Instead of staffing a room of analysts to watch dashboards, we're building the AI-driven system that does the watching: it triages alerts, investigates, and takes the first response action, so the humans on the team spend their time on the work that needs a human. Our goal is to automate every event we can, and we mean every event.\nWe're looking for the manager who builds both the Blue Team's software and the team itself. This is an engineering leadership role first. The team writes software: detection pipelines, automated response, the agents, and the integrations that tie them into Clio's products and infrastructure. You'll lead that team, set its technical direction, and stay close enough to the code to review it and contribute. Beyond leading, you'll get into the codebase and make changes in the agentic SOC and Clio's core applications, accelerated by Claude and Codex.\nYou won't be working alone. Clio's Red Team finds and exploits weaknesses; the Threat Intelligence function tracks who is targeting us and how. The Blue Team takes what both of them learn and turns it into defenses that hold: hardened infrastructure, hardened product, and detection that catches the next attempt automatically.\nBuilding the Team\nAs you onboard, one of the first tasks will be building out the team. We care much more about finding the right people than filling seats quickly, and you'll own that search: defining what great looks like, interviewing, and selling the work to people who have plenty of options.\nThe people we want are builders who are curious about security, or security people who build. You'll set the culture for a small, senior-leaning team that ships, owns the results, and makes its work visible to the rest of the company.\nA Day in the Life\nAI-assisted code writing in core Clio applications to add observability to the system\nSitting with the Red Team after an exercise to turn their findings into detections and fixes, then confirming the fixes hold on retest\nReading a new threat intel brief on a technique being used against SaaS companies, and deciding which part of the infrastructure to harden first\nWorking with a product engineering team to ensure incoming changes do not weaken the security posture of the application\nSpotting a spike in suspicious account activity, and asking why a human noticed it before the automation did\nInterviewing a candidate, then writing up honest feedback the same afternoon\nReviewing PRs from SOC agents, and developers from engineering teams at Clio to ensure changes are securely implemented\nWhat You'll Do\nBuild the agentic SOC\nLead the design and build of an AI-driven SOC that monitors, triages, investigates, and responds with as little human toil as possible\nTreat every manual alert-handling step as a candidate for automation, and measure how much of the queue the system closes on its own\nOwn detection engineering: detection-as-code, testing, tuning\nMake sure the automation is trustworthy: clear guardrails on what it can do unattended, audit trails for what it did, and a human escalation path when it isn't sure\nWork with the wider security team on incident response when something real happens, and feed what you learn back into the system\nHarden against new adversary techniques\nWork with Threat Intelligence to turn new tactics, techniques, and procedures into concrete hardening work and detection coverage\nPrioritize infrastructure hardening across cloud, identity, and endpoints based on observed attacker behaviour rather than benchmarks alone\nHarden Clio's products\nWork directly on the core security functionality of Clio's fleet of products, alongside the product engineering teams that own them\nPush security controls into the platform itself, so every product team gets them without having to rebuild them\nClose the loop with the Red Team\nPartner with the Red Team to find vulnerabilities, fix them, and verify the fixes\nRun exercises to measure detection coverage against real attack paths, and close the gaps they expose\nDetect and stop product abuse\nBuild automated detection for abuse of Clio's products: account takeover, fraud, scripted misuse, and patterns we haven't named yet\nAutomate the response as well as the detection, so confirmed abuse is contained without waiting for someone to notice\nWork closely with SecDev to build preventative code generation paths, agent.md guides, and create pre-commit hooks\nLead the team\nHire, grow, and retain a team of engineers\nSet clear direction and priorities, and make the team's progress visible to security leadership and the wider company\nHelp define how the team scales toward follow-the-sun coverage\nWhat You Bring\nStrong software development skills. We want you to build the software and have a direct impact on it\nExperience leading engineers, as a people manager or a tech lead who has grown into the role\nHands-on security experience: secure development, and finding and fixing vulnerabilities\nComfort making decisions about automation and AI where the cost of being wrong is a locked out lawyer that can sue us for free, and designing systems that fail safely\nClear communication with engineers, leadership, and partner teams\nBonus Points\nYou started in the trenches (SOC analyst, incident responder) and moved into engineering. We know this path is rare, and we'd love to hear from you if it's yours!\nHands-on experience building with LLMs or agentic systems in production\nDetection engineering experience with a SIEM, SOAR, or detection-as-code pipeline\nExperience with fraud, anti-abuse, or trust and safety systems\nCloud security and infrastructure hardening experience (AWS, identity providers, endpoint tooling)\nA recognized security certification or equivalent track record such as CISSP, GIAC/GCIH, OSCP, CREST\nExperience running or planning a follow-the-sun or on-call security function\nWhat you will find here:\nCompensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.\nSome highlights of our Total Rewards program include:\nCompetitive, equitable salary\n\nClio offers a flexible hybrid work environment\n\n25 days holiday + bank holidays\n\nPrivate Healthcare with Life Insurance & Critical Illness cover\n\nPension contribution\n\nProfessional development and growth options\n\nClioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years\n\nThe expected salary range for this role is £104,000 to £156,000 GBP. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility\nOur team shows up as their authentic selves, and are united by our mission. We are dedicated todiversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply.\nClio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.\nLearn more about our culture atclio.com/careers\nWe're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.\nDisclaimer: We only communicate with candidates through official @clio.com email addresses.","description_format":"text","description_chars":8401,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work","Life insurance","Professional development"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Legal Software"],"lifecycle":[{"event":"open","at":"2026-10-13T13:14:47Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":31,"reasons":["conf:12","win:early","comp:brand"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":206180,"is_top_pay":true},"html_url":"https://alion.io/job/clio-software-development-manager-application-security","json_url":"https://alion.io/job/clio-software-development-manager-application-security.json","meta":{"generated_at":"2026-10-14T19:02:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24892,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5273},"rest":"https://alion.io/mcp/rest/get_company?id=5273"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclio-software-development-manager-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclio-software-development-manager-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclio-software-development-manager-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clio-software-development-manager-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclio-software-development-manager-application-security"}]}