Hybrid Corporate Security Analyst | Incident Response & DLP

Clio; Calgary; Hybrid; CAD 84,000 - 113,000; Full time

Benefits offered by this job

Top-tier health benefits

Hybrid work environment

20 days off per year

Counseling benefit

RRSP matching

Job summary

Clio, a global leader in legal AI tech, seeks a Corporate Security Analyst to join the CorpSec team. In-office at least twice weekly in Calgary, you will own the endpoint tools, investigations, and security operations to protect Clio from threats.

Build unified security programs and support compliance with SOC 2 and ISO 27001 requirements. You will monitor alerts, triage DLP events, run investigations, and develop automation to improve detection and response.

Qualifications

• 2-4 years of hands-on experience in a security operations, IT security, or endpoint support role.
• Hands-on experience with EDR, DLP, Phishing, SSO Platforms, or Google Workspace security controls.
• Analytical mindset with curiosity to understand the underlying causes and fix the problem.
• Clear, evidence-first written communication documenting actions, findings, and decisions.
• Good judgment on when to work independently or ask for help.
• Demonstrate a keen interest in improving craft using AI.

Responsibilities

• Monitor and triage DLP alerts; operate EDR day-to-day and review detections.
• Run phishing simulations end-to-end and educate employees.
• Handle L1/L2 security incidents; triage and contain threats.
• Maintain runbooks and support evidence collection for SOC 2 and ISO 27001.
• Develop scripts to drive auto-remediation and tune AI detection.
• Collaborate across Clio security stack (Okta, 1Password, Google Workspace, MDM).

Skills

Security operations

Endpoint security

Security tooling

Communication skills

Analytical mindset

Tools

EDR

DLP

Phishing

SSO Platforms

Google Workspace security

Job description

Clio, a global leader in legal AI tech, seeks a Corporate Security Analyst to join the CorpSec team. In-office at least twice weekly in Calgary, you will own the endpoint tools, investigations, and security operations to protect Clio from threats.

Build unified security programs and support compliance with SOC 2 and ISO 27001 requirements. You will monitor alerts, triage DLP events, run investigations, and develop automation to improve detection and response.