Corporate Security Analyst

Résumé du poste

The Corporate Security Analyst will operate and maintain security toolsets, including EDR and DLP systems, to protect the organization from internal and external threats. They are responsible for triaging security alerts, conducting incident investigations, and supporting compliance evidence collection for frameworks like SOC 2 and ISO 27001.

Détails du poste

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely. We are transforming the legal experience for all by bettering the lives of legal professionals [https://www.clio.com/customers/]while increasing access to justice [https://www.clio.com/customers/california-innocence-project-changes-lives-clio/]. SUMMARY: We're looking for a Corporate Security Analyst to join our rapidly growing CorpSec team. This role is for someone who is passionate about corporate security and building on existing frameworks, and is available to candidates local to one of our hubs (Burnaby, Calgary, or Toronto). You will be expected to be in-office a minimum of twice per week. CorpSec is transitioning and growing at Clio into a focused, mission-driven function with security systems and practices already in place. Your team works closely with IT Systems, Application Security, People, Compliance, and IT Services to ensure appropriate security coverage in detection, response, and establishing non-adversarial techniques. The Corporate Security Analyst will be responsible for adopting and unifying systems, communication, and oversight across IT Systems, Application Security, and Compliance. You will build upon existing trust, define a unified approach, and formalize the program in accordance with compliance requirements. You will build upon existing trust, work with a unified approach, and support the program in accordance with compliance requirements. WHAT YOU’LL DO: This role acts as an operator of Clio's corporate security toolset, owning the endpoint tools, investigative processes, and organizational culture required to protect Clio from internal and external threats - both accidental and intentional. You own the day-to-day execution: monitoring alerts, triaging DLP events, running investigations, and keeping the systems that protect Clio running reliably. You don't need to have all the answers - but you need to determine what you don't know, ask the right questions, and close the loop on everything you own. * Build & Run: Monitor and triage DLP alerts to surface real signals from noise and operate EDR day-to-day by reviewing detections and executing response procedures. You’re naturally curious about how the tools you operate actually work, not just how to use them. * Drive Education: Run phishing simulation campaigns end-to-end - from scheduling to employee education loops - while ensuring that no one is left guessing by communicating clearly when something breaks. * Incident Response: Handle L1/L2 security incidents (phishing, device compromise, data loss) by triaging and containing threats. You take pride in ensuring that alerts don’t age in your queue. * Optimize Systems: Maintain runbooks and support compliance evidence collection (SOC 2, ISO 27001). You adapt when priorities shift and don't need perfect information to make progress. * Technical Growth: Develop scripts to drive auto-remediation and tune security tooling for AI detection to address unauthorized data moves. * Collaborate: Engage with a security culture that solicits feedback and drives visibility across Clio’s security stack (Okta, 1Password, Google Workspace, MDM). WHAT YOU BRING: * 2-4 years of hands-on experience in a security operations, IT security, or endpoint support role. * Tool Proficiency: Hands-on experience with EDR, DLP, Phishing, SSO Platforms, or Google Workspace security controls. * Analytical Mindset: A healthy curiosity to look for the "why" and fix the problem rather than the symptom. * Communication: Clear, evidence-first written communication. You document what you did, what you found, and what you decided. * Judgment: You know when to figure something out independently and when to ask for help. * Demonstrate a keen interest in improving your craft by using AI BONUS IF YOU HAVE: * Hands-on familiarity with MDM or SIEM in a security incident context. * Experience supporting SOC 2 or ISO 27001 evidence collection. * Exposure to scripting (Python, Bash) for automating investigation or remediation tasks. * Relevant certifications: CISSP, CompTIA Security+, CySA+, or equivalent. #LI-Remote This is a new role. What you will find here: Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture. Some highlights of our Total Rewards program include: * Competitive, equitable salary with top-tier health benefits, dental, and vision insurance * Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week. * Flexible time off policy, with an encouraged 20 days off per year. * $2000 annual counseling benefit * RRSP matching and RESP contribution * Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years The expected salary range for this role is $83,600 to $113,200 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile. Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion [https://www.clio.com/about/values/]. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply. Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs. Learn more about our culture at clio.com/careers [https://www.clio.com/about/careers/] We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions. Disclaimer: We only communicate with candidates through official @clio.com email addresses.

Ce que vous ferez

The Corporate Security Analyst will operate and maintain security toolsets, including EDR and DLP systems, to protect the organization from internal and external threats. They are responsible for triaging security alerts, conducting incident investigations, and supporting compliance evidence collection for frameworks like SOC 2 and ISO 27001.

Exigences

Candidates must have 2-4 years of hands-on experience in security operations, IT security, or endpoint support. Proficiency with security tools such as EDR, DLP, and SSO platforms is required, along with strong analytical and communication skills.

Avantages

• Health insurance • Dental insurance • Vision insurance • Flexible time off • Counseling benefit • RRSP matching • RESP contribution • Clioversary recognition program

Compétences indiquées

• Compliance · Souhaitée
• Python · Souhaitée

Autres compétences pertinentes

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Security operations
• EDR
• DLP
• Phishing simulation
• SSO platforms
• Google Workspace security
• Incident response
• Compliance
• SOC 2
• ISO 27001
• Scripting
• Python
• Bash
• MDM
• SIEM
• Analytical mindset
• Okta
• CompTIA Cybersecurity Analyst (CySA+)
• Endpoint Detection And Response
• IT Security
• Curiosity
• Evidence Collection
• 1Password
• Artificial Intelligence
• Application Security
• Automation
• Bash (Scripting Language)
• Certified Information Systems Security Professional
• Communication
• CompTIA Security+
• Security Controls
• Corporate Security
• Mobile Device Management
• Incident Response
• Innovation
• ISO/IEC 27001
• IT Service Management
• Python (Programming Language)
• Operations
• Phishing
• Security Information And Event Management (SIEM)
• Single Sign-On (SSO)
• Tooling
• Triage
• Vision Insurance
• Writing
• Scheduling
• Security Systems
• Investigation
• Google Workspace

Domaines d’emploi

• Security & Safety
• Technology
• Software
• Corporate Security Analyst
• Security Operations Center Analyst
• Database and Network Professionals Not Elsewhere Classified
• Software Quality Assurance Analysts and Testers