Security Engineer, Logging Platform

Are you someone who is always probing and asking why, someone who enjoys finding smarter and more efficient solutions to problems? If so, we have a spot for you on Clio's security team. If you have a strong operations background with a passion for security and experience in cloud-first environments, then we want to talk to you.

This role sits on our logging team. At most companies logging lives in infrastructure or platform engineering. At Clio it sits inside Security, and we own it end to end. Reliable, tamper-resistant logs are the foundation of our entire security posture. Without trustworthy evidence, nothing else in a security program holds up.

We ensure timely ingestion, proper transformation, and high availability of logging data to all our internal customers. Our goal is to support our existing logging infrastructure, while also working to build out the next generation architecture needed to support growing security programs.

Onboard new log sources end to end: collect the data, parse and normalize it, and land it in OpenSearch

Scale and tune our OpenSearch clusters in AWS, including node sizing, shard and index strategy, and storage tiers

Handle cluster maintenance: version upgrades, snapshots and restores, and index lifecycle policies

Troubleshoot ingestion delays, parsing failures and cluster health issues and take part in triaging issues as they come in

Automating existing manual work and moving infrastructure into code

Model log data so fields are consistent and queryable across sources

Maintain the access controls that keep log data complete, trustworthy and tamper-resistant

Contribute to the design of our next-generation logging platform and the SIEM that will run on it, working closely across teams to achieve this

Hands-on experience running OpenSearch or Elasticsearch clusters, including scaling, tuning, upgrades and troubleshooting

Experience building log ingestion and parsing pipelines with tools like Logstash, Fluent Bit, Opensearch Ingestion

Familiarity with streaming services such as Kinesis, Kafka

3+ years working in AWS environments, with a solid understanding of how to secure them

Working knowledge of infrastructure as code tools like Terraform or Puppet

Ability to write Python or Ruby to automate operational work

Strong Linux skills

Curiosity about how security teams use log data, and a keen interest in improving your craft by using AI

Experience with SIEM implementation or migration

Familiarity with log schemas such as ECS or OCSF

Hands-on work with S3-based data lakes, log routing or high-volume event pipelines

Experience with Kubernetes and/or EKS

Infrastructure security background (firewalls, ACLs, authentication, device hardening)

Security certifications such as AWS Certified Security – Specialty, CKS, CISSP or similar

Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.

Competitive, equitable salary with top-tier health benefits, dental, and vision insurance

Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.

Flexible time off policy, with an encouraged 20 days off per year.

$2000 annual counseling benefit

RRSP matching and RESP contribution

Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion . We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply.

Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.

Learn more about our culture at clio.com/careers

We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.

Disclaimer: We only communicate with candidates through official @clio.com email addresses.