{"id":1681840,"url":"https://alion.io/job/clio-senior-corporate-security-analyst","title":"Senior Corporate Security Analyst","company":{"id":5273,"name":"Clio","domain":"clio.com","url":"https://alion.io/company/clio","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Burnaby, Canada","Toronto, Canada","Calgary, Canada","Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":70000,"max_usd":128000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":40},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"Commander.js","optional":false},{"name":"DLP","optional":false},{"name":"FedRAMP","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true}],"status":"live","first_seen_at":"2026-09-16T00:00:00Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-14T22:15:46Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.\nWe are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.\nSummary:\nAbout the Team\nCorpSec is transitioning and growing at Clio, into a focused mission-driven function within the organization. Security systems and practices are already in place, this role will be responsible for adopting and unifying the systems, communication, and oversight of security systems from across IT Systems, Application Security, and Compliance. Build upon the existing trust within the organization, define a unified approach, configure, formalize the program in accordance to Compliance requirements. This role is available to candidates across Canada, excluding Quebec. If you are local to one of our hubs (Burnaby, Calgary, or Toronto) you will be expected to be in office minimum twice per week on one of our Anchor Days.\nYour team will work closely with the IT Systems, Application Security, People, Compliance, and IT Services teams to ensure appropriate security coverage in detection, response, and establishing non-adversarial techniques.\nAbout the Role\nThis role is established for the purpose of driving the cybersecurity definitions and posture across our fleet and systems - leading investigations, owning incident response end-to-end, and improving the operational quality of how we detect and respond to threats. You will protect Clio from internal and external threats, accidental and intentional.\nAs Senior Corporate Security Analyst, you are both a senior operator and a project lead. You own detection and response work end-to-end, lead high-severity incidents, and raise the quality and velocity of how the team operates. You stay hands-on with the tools that matter - DLP, EDR, phishing, SIEM, SSO - and you turn ambiguous patterns into runbooks, automations, and durable improvements.\nThe successful candidate is a force-multiplier. They recognize the importance of resolving incidents and closing tickets, they are also the person within the team that makes the teams an processes around them better. You coach junior analysts, lead high-severity investigations, and partner with adjacent teams to close gaps that no single team owns. Familiarity and proficiency with AI tooling is expected; you will help define how we use it in detection and response responsibly. Where there may be a built up pain tolerance to inefficiencies or legacy processes, you learn to understand them and propose updates or rewrites when the base objective is no longer being met.\nWhat You'll Do\nBuild & Run - Technical & Operational\nThe role has senior technical expectations, including raising the operational bar of the team.\nLead investigations and incident response for medium- and high-severity security events - phishing campaigns, insider risk, compromised accounts, data-loss concerns - owning the response from triage through resolution and post-incident review.\n\nOwn detection engineering across the corporate security stack - tune DLP, EDR, phishing templates, remediations, and SSO/IdP signals; build correlation rules; reduce false-positive rates without sacrificing coverage.\n\nDrive root-cause analysis after incidents and near-misses, then translate findings into durable runbook, control, and tooling changes.\n\nBuild and maintain automations and integrations that move work left - auto-remediation playbooks, signal enrichment, evidence collection pipelines.\n\nDefine, document, and evolve internal incident response playbooks for insider threat, compromised device, and data-loss scenarios.\n\nPartner with the Manager, CorpSec on tooling decisions - evaluate, configure, and operate platforms across EDR, DLP, phishing, SIEM, and SOAR.\n\nTune and evolve security tooling for AI detection - address risks of unauthorized data movement, agentic workflows, and the lethal trifecta.\n\nDrive correlation and visibility capability across Clio's security stack so detection and investigation stay timely as the company continues to grow.\n\nLead & Improve - Team & Cross-Functional\nAct as incident commander on high-severity events - coordinate response across respective teams, as needed; communicate clearly to stakeholders during and after.\n\nRaise the operational bar of the team - coach junior analysts, review their investigations, share patterns and gotchas, and write documentation, scripts, and/or automations for others to learn from.\n\nIdentify operational health problems before they become incidents - propose, prioritize, and execute the work to close gaps.\n\nDrive cross-team initiatives that no single team owns - DLP policy refinement, MDM coverage, audit log centralization, AI tooling guardrails.\n\nSupport security compliance requirements for SOC 2, ISO 27001, GovRAMP, and PCI-DSS - own and design technical evidence pipelines, not just one-off collection.\n\nMaintain Clion trust by communicating transparently and proportionately - we design to protect, not to surveil.\n\nWhat You Bring\n5-8 years of hands-on experience in security operations, detection engineering, or incident response.\n\nDeep hands-on experience with at least three of: EDR, DLP, Phishing platforms, SIEM, or Google Workspace security controls - you've configured, tuned, and operated them in production.\n\nDemonstrated experience leading security incidents end-to-end - you've been the incident commander, not just a contributor.\n\nTrack record of root-cause investigation - you fix the problem, not the symptom, and translate the fix into a durable control or automation.\n\nStrong written communication - your runbooks, post-incident reviews, and decisions are easy to follow for engineers outside CorpSec.\n\nDemonstrated ability to coach or mentor more junior analysts - you raise the bar of those around you, not just your own.\n\nComfort with ambiguity - you can take an open-ended problem (\"our DLP signal-to-noise is bad\") and produce a concrete, prioritized plan.\n\nA healthy curiosity to look for the why and fix the problem rather than the symptom.\n\nExperience using, observing, and securing AI systems, platforms, and agents.\n\nGrowth mindset when it comes to process improvement and new technologies, especially AI.\n\nPreferred\nExperience designing or operating SIEM or detection-as-code pipelines.\n\nExperience contributing to security compliance programs including SOC 2, ISO 27001, GovRAMP, or FedRAMP.\n\nScripting fluency (Python, Bash, PowerShell) for automating investigation, evidence collection, and remediation.\n\nIndustry certifications such as CISSP, CISM, GCIH, GCIA, or CompTIA Security+.\n\nComfortable jumping onto due-diligence calls if Compliance requires assistance with customer Risk Interviews.\n\nWhat Makes You a Great Fit\nYou're a force multiplier - when you're on a project, the whole team gets better.\n\nYou lead with calm under pressure - when an incident lands, people feel the response tighten, not panic.\n\nYou document decisions for the engineer who comes after you - your runbooks outlive the on-call rotation that wrote them.\n\nYou're principled about the visibility-trust tension - you treat security communication as a trust-building exercise.\n\nYou're energized by improving systems, not just operating them - you leave every tool, runbook, and process measurably better than you found it.\n\nThis is a new role.What you will find here:\nCompensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.\nSome highlights of our Total Rewards program include:\nCompetitive, equitable salary with top-tier health benefits, dental, and vision insurance\n\nHybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.\n\nFlexible time off policy, with an encouraged 20 days off per year.\n\n$2000 annual counseling benefit\n\nRRSP matching and RESP contribution\n\nClioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years\n\nThe expected salary range for this role is $106,300 to $143,800 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility\nOur team shows up as their authentic selves, and are united by our mission. We are dedicated todiversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply.\nClio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.\nLearn more about our culture atclio.com/careers\nWe're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.\nDisclaimer: We only communicate with candidates through official @clio.com email addresses.","description_format":"text","description_chars":9784,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Hybrid work","Vision insurance"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Legal Software"],"lifecycle":[{"event":"open","at":"2026-10-02T09:46:43Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.792,"p_room":0.75,"age_days":29,"expected_fill_days":31,"reasons":["conf:7","velocity","win:late","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/clio-senior-corporate-security-analyst","json_url":"https://alion.io/job/clio-senior-corporate-security-analyst.json","meta":{"generated_at":"2026-10-15T17:21:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26371,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5273},"rest":"https://alion.io/mcp/rest/get_company?id=5273"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclio-senior-corporate-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclio-senior-corporate-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclio-senior-corporate-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clio-senior-corporate-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclio-senior-corporate-security-analyst"}]}