Security Engineer, Logging Platform in Calgary

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely. We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.

We are currently seeking an Infrastructure Security Engineer to join our rapidly growing Security team. This role is for someone passionate about building proactive security solutions, implementing detection capabilities, and driving security automation at scale. You will be exposed to new challenges and technologies while making a tangible impact. This role is available to candidates across Canada (excluding Quebec). If you are local to one of our hubs (Burnaby, Calgary, or Toronto) you will be expected to be in office minimum two days per week for our Anchor Days.

What your team does:

• Onboard new log sources end to end: collect the data, parse and normalize it, and land it in OpenSearch.
• Scale and tune our OpenSearch clusters in AWS, including node sizing, shard and index strategy, and storage tiers.
• Handle cluster maintenance: version upgrades, snapshots and restores, and index lifecycle policies.
• Troubleshoot ingestion delays, parsing failures and cluster health issues and take part in triaging issues as they come in.
• Automate existing manual work and move infrastructure into code.
• Model log data so fields are consistent and queryable across sources.
• Maintain the access controls that keep log data complete, trustworthy and tamper-resistant.
• Contribute to the design of our next-generation logging platform and the SIEM that will run on it, working closely across teams to achieve this.

What you may have:

• Hands-on experience running OpenSearch or Elasticsearch clusters, including scaling, tuning, upgrades and troubleshooting.
• Experience building log ingestion and parsing pipelines with tools like Logstash, Fluent Bit, Opensearch Ingestion.
• Familiarity with streaming services such as Kinesis, Kafka.
• 3+ years working in AWS environments, with a solid understanding of how to secure them.
• Working knowledge of infrastructure as code tools like Terraform or Puppet.
• Ability to write Python or Ruby to automate operational work.
• Strong Linux skills.
• Curiosity about how security teams use log data, and a keen interest in improving your craft by using AI.

Serious bonus points if you have:

• Experience with SIEM implementation or migration.
• Familiarity with log schemas such as ECS or OCSF.
• Hands-on work with S3-based data lakes, log routing or high-volume event pipelines.
• Experience with Kubernetes and/or EKS.
• Infrastructure security background (firewalls, ACLs, authentication, device hardening).
• Security certifications such as AWS Certified Security - Specialty, CKS, CISSP or similar.

This role is a backfill for an existing position.

What you will find here:

• Competitive, equitable salary with top-tier health benefits, dental, and vision insurance.
• Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.
• Flexible time off policy, with an encouraged 20 days off per year.
• $2000 annual counseling benefit.
• RRSP matching and RESP contribution.
• Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years.

The expected salary range for this role is $119,000 to $161,000 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.

Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility.