Skip to content
Clay

Security Engineer

New York; San FranciscoHybrid · United States
FullTime · Engineering
POSTED 16 APRVERIFIED 33M AGO
Apply Ask
Pay · posted
$225k–300k
mkt median $208k
Open for
201d
since 16 Apr
Hiring · 30d
62
−2 net · open roles
AWSDockerTerraform

About Clay

AI is unleashing the biggest wave of company creation in history. Clay's mission is to be the engine those companies use to grow to their full potential.

Clay predicts the next best action for your business and then helps you take it. We started by aggregating the best data for B2B companies. Then, we built the infrastructure to run any personalized campaign on top of it, including emails, ads, landing pages, and workflows that make reps more productive. Now, we're building agents that can help grow your company for you. We're already helping thousands of customers — including Anthropic, OpenAI, Google, and Visa — go to market with unique data, signals, and AI research.

In 2026, we raised a $115M Series D at $7.1B Valuation led by Wellington — and are on track to cross $200M in revenue this quarter. We also launched a $1M Scholarship fund for GTME Education.

Some things to know about us:

Our community includes 17,000+ customers, 200+ integration partners, 125+ agencies, 50+ Clay clubs, and 30k members on Slack.

Our culture is unique inside and outside of work. Our team members are also DJs, activists, writers, clowns, marathoners, skydivers, psychedelic therapists, social workers, and more.

All employees can work with world-class coaches who specialize in creativity, management, and more.

Our operating principles — including negative maintenance and non-attached action — guide our work. Read more about them here.

Read about us in the NYT, Forbes, First Round Review, and more.

Hear from our employees directly on our Glassdoor page!

Security Engineering @ Clay

We're building a modern security organization from the ground up. We're hiring senior or staff-level security engineers who are strong software engineers first, with deep expertise in either Cloud Security or Application Security and working knowledge across both.

This is a hands-on role. You'll spend significant time writing production code—security tooling, detection systems, remediation pipelines, and frameworks that make secure defaults the easiest path. You'll also help define how we leverage modern automation, including frontier AI models (e.g. Mythos), to scale security operations: autonomously discovering vulnerabilities, reviewing AI-generated code, and building detection systems that understand context and intent.

What You'll Do

Build security primitives, tooling, and automation that scale with the product and engineering org

Define and implement our strategy for modern security workflows: AI-assisted vulnerability discovery, automated code review, threat detection, and remediation

Collaborate with Infrastructure and Product Engineering to make secure defaults the easiest path

Own projects end to end: design, implementation, rollout, and measurement

Cloud Security

Secure our cloud environment (IAM, network policies, container security, secrets management, and misconfiguration prevention).

Define and enforce least-privilege access patterns across services and humans.

Improve cloud visibility and control using infrastructure-as-code and cloud security tooling (we currently use Terraform, AWS Config, and AWS Security Hub).

Develop preventative controls and safe deployment patterns that reduce the probability and blast radius of incidents.

Application Security

Lead secure design and secure coding practices, and prevent common vulnerability classes.

Perform architecture reviews and code-level security reviews, and work hands-on with engineers to ship fixes.

Own the vulnerability discovery and validation lifecycle: static and dynamic analysis, dependency checks, pen tests, and bug bounties. Integrate modern automated detection systems (including Claude Mythos-class models) to find vulnerabilities at scale.

Build and deploy security agents and automated workflows that can scan codebases, propose fixes, and in some cases autonomously deploy security patches.

Build frameworks and reusable components for authentication, authorization, and secure-by-default patterns.

Define practical policies and controls for code generation tools and coding agent changes, so they can be used safely and consistently.

Source · ClayFirst seen 2 NovOriginal ↗