CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 38 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.

As a Senior Security Engineer, Vulnerability Management on our Product Security team you’ll help run and evolve CLEAR’s vulnerability management program across cloud, infrastructure, endpoints, and applications. You’ll operate the tools that surface risk (like Wiz, Tenable, and Github), turn findings into clear, actionable work, and partner with engineering teams to drive down real-world risk. Not just tickets.

What you’ll do:

• Monitor and triage findings from Wiz, Tenable, GHAS, and other scanners, ensuring issues are routed to the right owners with the right context and priority.
• Manage on our centralized VM platform that aggregates findings across Wiz, Tenable, GHAS, and other sources and ensure consistent normalization, deduplication, and ownership mapping (e.g., by AWS tags, teams, or services) so we have a single, trustworthy view of risk.
• Manage CLEAR’s risk scoring and SLA models (High/Critical, “Most Wanted” assets, ETC) within the VM platform and make sure we are tracking overdue findings, SLA adherence, backlog trends, and top risky assets/teams
• Work directly with code, cloud, and endpoint teams to clarify findings, group related issues, and translate scanner output into concrete remediation plans that fit their roadmaps.
• Partner with engineering to get fixes shipped 
• Participate in regular triage / review sessions, help prioritize backlog items, and follow through to ensure high‑risk issues are validated and closed in the source tools (not just Jira).
• Contribute to VM process and tool improvements with enhancements to connectors, data quality checks, scorecards, runbooks, and how‑to guides so vulnerability management processes are repeatable and easy to onboard to.

How you’ll measure success:

• Cleaner, more accurate vulnerability data with fewer duplicates and orphaned tickets; consistent mapping between scanner findings, Jira issues, and asset/ownership data across Wiz, Tenable, and other tools.
• Improved remediation outcomes with a reduction in High/Critical vulnerabilities out of SLA, especially on top-risk assets and services, and visible burn‑down in dashboards and scorecards.
• Operational efficiency and predictability with less manual reconciliation across tools and spreadsheets; more of the VM workflow (triage, routing, validation, reporting) running through standard playbooks and automation.
• Trust in reporting as Security, Engineering, and Compliance stakeholders rely on VM dashboards as the single source of truth for vulnerability posture, SLAs, and exceptions.

What you’re great at:

• 6+ years of experience in security engineering, vulnerability management, or security operations, ideally in a cloud‑first or SaaS environment.
• Hands‑on experience working with at least one modern vulnerability or exposure management stack (e.g., Wiz, Tenable, Rapid7, GHAS, or similar).
• Understanding of end‑to‑end VM workflows: scanning, triage, risk scoring, ticketing, validation, and reporting.
• Working knowledge of modern cloud and infrastructure patterns (AWS preferred), including how services, hosts, containers, and repos map to real teams and products.
• Strong written and verbal communication skills; can explain vulnerabilities, risk tradeoffs, and SLAs to both deeply technical engineers and non‑technical stakeholders.
• Experience supporting regulated environments (e.g., FedRAMP, PCI, SOC2) and preparing vulnerability‑related evidence for audits.

How You'll be Rewarded:

At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co-working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the office, we invest in your well-being and learning & development with stipends and reimbursement programs. 

We offer holistic total rewards, including comprehensive healthcare plans, family-building benefits (fertility and adoption/surrogacy support), flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The total compensation range for this role is $225,000 -$300,000, depending on levels of skills and experience.

This range represents the combined base salary and new hire equity package (in Restricted Stock Units) for this position at CLEAR. Additionally, this role will be eligible for refresh equity grants as part of our ongoing compensation program. Actual compensation will vary based on factors including, but not limited to, location, education, skills, experience, and performance. All stock based compensation will be subject to the terms and conditions of applicable agreements.

CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs. Please let us know if you require a reasonable accommodation to apply for a job or perform your job. Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.

We are committed to a transparent and secure hiring process. All communications related to this role will come directly from a CLEAR employee through valid CLEAR channels (e.g., a valid @clearme.com email address or verified CLEAR LinkedIn profile). We encourage candidates to remain alert to job scams and to report any suspicious activity.

#LI-Onsite

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 38 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.

We are investing in a Security Compliance Analyst to own governance of IT General Controls (ITGCs) and support SOX audit readiness across CLEAR. This role will drive process rigor, improve evidence quality, and strengthen our compliance posture to enable scalable, efficient growth.

What you’ll do:

• Serve as the primary liaison for internal and external SOX auditors, coordinating and delivering accurate PBC evidence to ensure smooth audit cycles
• Own the end-to-end lifecycle of User Access Reviews (UARs) for SOX-critical systems, including evidence collection, reviewer coordination, and remediation tracking
• Validate change management processes by reviewing documentation, approvals, and Segregation of Duties (SoD) controls
• Monitor and document IT Operations controls, including job scheduling and disaster recovery / backup testing
• Maintain SOX documentation and proactively identify opportunities to improve processes, streamline evidence collection, and advance a more scalable, automation-forward compliance model

How you’ll measure success:

• Timeliness and completeness of audit deliverables (e.g., PBC requests, UAR execution)
• Reduction in control deficiencies, audit findings, and regulatory risk exposure
• Efficiency gains in audit cycles, including measurable time savings for control owners
• Accuracy, consistency, and scalability of ITGC documentation and reporting

What you’re great at:

• 2–5+ years of experience in IT audit, SOX compliance, or internal audit (Big Four experience preferred)
• Deep knowledge of the Sarbanes-Oxley Act (SOX), including Section 404, and the COSO Internal Control Integrated Framework
• Demonstrated ability to perform risk assessments, evaluate control design effectiveness, and conduct operating effectiveness testing
• Strong understanding of IT General Controls (ITGCs) and their relationship to financial reporting systems (e.g., SAP, Oracle, or similar ERPs)
• Ability to manage complex, recurring compliance processes with strong attention to detail and operational rigor
• Clear written and verbal communication skills to partner with control owners and interface effectively with auditors
• Professional certifications such as CISA, CIA, or CPA are preferred

How You'll be Rewarded:

At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co-working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the office, we invest in your well-being and learning & development with stipends and reimbursement programs. 

We offer holistic total rewards, including comprehensive healthcare plans, family-building benefits (fertility and adoption/surrogacy support), flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The total compensation range for this role is $130,000 - $160,000, depending on levels of skills and experience.

This range represents the combined base salary and new hire equity package (in Restricted Stock Units) for this position at CLEAR. Additionally, this role will be eligible for refresh equity grants as part of our ongoing compensation program. Actual compensation will vary based on factors including, but not limited to, location, education, skills, experience, and performance. All stock based compensation will be subject to the terms and conditions of applicable agreements.

CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs. Please let us know if you require a reasonable accommodation to apply for a job or perform your job. Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.

We are committed to a transparent and secure hiring process. All communications related to this role will come directly from a CLEAR employee through valid CLEAR channels (e.g., a valid @clearme.com email address or verified CLEAR LinkedIn profile). We encourage candidates to remain alert to job scams and to report any suspicious activity.

#LI-Onsite

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 38 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.

As a Senior Security Engineer on the Infrastructure Security Engineering (ISE) team, you will help safeguard CLEAR’s core platforms across cloud, identity, and corporate endpoint controls. You’ll harden our AWS and Kubernetes environments, scale security controls through infrastructure-as-code, and partner with teams across Engineering, CorpIT, and Security to make secure-by-default the easiest path.

What you’ll do:

• Design, implement, and continuously improve security controls for our AWS and GCP accounts, Kubernetes clusters, and containerized workloads.
• Embed guardrails into infrastructure-as-code (Pulumi/Terraform) and CI/CD so security is automated, repeatable, and testable.
• Partner with platform and product teams to prioritize and remediate misconfigurations and vulnerabilities based on risk and business impact.
• Ensure infrastructure access patterns align with Zero Trust principles (least privilege, just-in-time access, strong authentication).
• Automate recurring security workflows (detections, reporting, evidence collection) to reduce manual toil and improve time to response.
• Act as a trusted partner to Platform, SRE, and Product Engineering teams—supporting design reviews, offering practical guidance, and championing secure patterns that fit how teams actually build.

How you’ll measure success:

• Meaningful reduction in critical and high-severity vulnerabilities across cloud, container, and endpoint assets, and sustained performance against targets.
• Policy-as-code adoption and increased coverage of AWS organizations, accounts, clusters, and services protected by standardized guardrails, SCPs, and baseline configurations.
• New infrastructure and platform capabilities shipped with clear, reusable security patterns (networking, identity, secrets, logging) that teams adopt without friction.
• Improved signal-to-noise and reduced manual effort in vulnerability management and security operations as a result of automation, better configuration, and clearer ownership.
• Positive feedback from engineering and partner teams on the clarity, reliability, and usability of infrastructure security controls and guidance.

What you’re great at:

• 6+ years of experience in infrastructure, cloud, or platform security, with hands-on responsibility for securing AWS-based environments at scale.
• Strong understanding of modern infrastructure architectures: multi-account AWS, Kubernetes/EKS, containers, CI/CD, and microservices.
• Deep familiarity with AWS security building blocks: IAM, organizations and SCPs, VPC/networking, KMS, logging/monitoring, and common security services.
• Proficiency with infrastructure-as-code (Pulumi and/or Terraform) and scripting or general-purpose languages (e.g., Python, Go, or similar) to automate security controls and workflows.
• Ability to explain complex infrastructure risks and tradeoffs to both deeply technical partners and non-technical stakeholders.
• Experience in regulated or audited environments (e.g., PCI, SOC 2, FedRAMP, NIST 800-53) and translating requirements into pragmatic controls.

How You'll be Rewarded:

At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co-working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the office, we invest in your well-being and learning & development with stipends and reimbursement programs. 

We offer holistic total rewards, including comprehensive healthcare plans, family-building benefits (fertility and adoption/surrogacy support), flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The total compensation range for this role is $225,000 -$300,000, depending on levels of skills and experience.

This range represents the combined base salary and new hire equity package (in Restricted Stock Units) for this position at CLEAR. Additionally, this role will be eligible for refresh equity grants as part of our ongoing compensation program. Actual compensation will vary based on factors including, but not limited to, location, education, skills, experience, and performance. All stock based compensation will be subject to the terms and conditions of applicable agreements.

CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs. Please let us know if you require a reasonable accommodation to apply for a job or perform your job. Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.

We are committed to a transparent and secure hiring process. All communications related to this role will come directly from a CLEAR employee through valid CLEAR channels (e.g., a valid @clearme.com email address or verified CLEAR LinkedIn profile). We encourage candidates to remain alert to job scams and to report any suspicious activity.

#LI-Onsite