Security Engineer, Logging Platform

Themis Solutions Inc.; Vancouver, Calgary, Toronto; Hybrid; CAD 119,000 - 161,000; Full time

Benefits offered by this job

Hybrid work environment

Health benefits (top-tier), dental, & 

Vision insurance

Flexible time off

Counseling benefit RRSP matching & RES

Clioversary program

Job summary

Clio is seeking an Infrastructure Security Engineer to join its Security team. You will build proactive security solutions, implement detection capabilities, and drive security automation at scale.

The role sits on the logging team, ensuring trustworthy, tamper‑resistant logs across OpenSearch in AWS, with opportunities to shape next‑generation logging and SIEM architecture. You will onboard log sources end to end, scale clusters, manage upgrades, and automate manual tasks.

Qualifications

• Hands-on experience running OpenSearch or Elasticsearch clusters, including scaling, tuning, upgrades and troubleshooting.
• Experience building log ingestion and parsing pipelines with tools like Logstash, Fluent Bit, Opensearch Ingestion.
• Familiarity with streaming services such as Kinesis, Kafka.
• 3+ years working in AWS environments, with a solid understanding of how to secure them.
• Working knowledge of infrastructure as code tools like Terraform or Puppet.
• Ability to write Python or Ruby to automate operational work.
• Strong Linux skills.
• Curiosity about how security teams use log data, and a keen interest in improving your craft by using AI.
• Experience with SIEM implementation or migration.
• Familiarity with log schemas such as ECS or OCSF.
• Hands-on work with S3-based data lakes, log routing or high-volume event pipelines.
• Experience with Kubernetes and/or EKS.
• Infrastructure security background (firewalls, ACLs, authentication, device hardening).
• Security certifications such as AWS Certified Security – Specialty, CKS, CISSP or similar.

Responsibilities

• Onboard new log sources end to end: collect the data, parse and normalize it, and land it in OpenSearch.
• Scale and tune our OpenSearch clusters in AWS, including node sizing, shard and index strategy, and storage tiers.
• Handle cluster maintenance: version upgrades, snapshots and restores, and index lifecycle policies.
• Troubleshoot ingestion delays, parsing failures and cluster health issues and take part in triaging issues as they come in.
• Automating existing manual work and moving infrastructure into code.
• Model log data so fields are consistent and queryable across sources.
• Maintain the access controls that keep log data complete, trustworthy and tamper-resistant.
• Contribute to the design of our next‑generation logging platform and the SIEM that will run on it, working closely across teams to achieve this.

Skills

OpenSearch/Elasticsearch

Log ingestion pipelines

AWS

Terraform

Puppet

Python

Ruby

Linux

Kubernetes / EKS

Security automation / SIEM

Tools

OpenSearch/Ingestion

Logstash

Fluent Bit

Kinesis

Kafka

S3

Terraform

Puppet

Job description

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely. We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.

Summary: We are currently seeking an Infrastructure Security Engineer to join our rapidly growing Security team. This role is for someone passionate about building proactive security solutions, implementing detection capabilities, and driving security automation at scale. You will be exposed to new challenges and technologies while making a tangible impact. This role is available to candidates across Canada (excluding Quebec). If you are local to one of our hubs (Burnaby, Calgary, or Toronto) you will be expected to be in office minimum two days per week for our Anchor Days.

What your team does

Are you someone who is always probing and asking why, someone who enjoys finding smarter and more efficient solutions to problems? If so, we have a spot for you on Clio's security team. If you have a strong operations background with a passion for security and experience in cloud-first environments, then we want to talk to you. This role sits on our logging team. At most companies logging lives in infrastructure or platform engineering. At Clio it sits inside Security, and we own it end to end. Reliable, tamper-resistant logs are the foundation of our entire security posture. Without trustworthy evidence, nothing else in a security program holds up. We ensure timely ingestion, proper transformation, and high availability of logging data to all our internal customers. Our goal is to support our existing logging infrastructure, while also working to build out the next generation architecture needed to support growing security programs.

A day in the life might look like

• Onboard new log sources end to end: collect the data, parse and normalize it, and land it in OpenSearch
• Scale and tune our OpenSearch clusters in AWS, including node sizing, shard and index strategy, and storage tiers
• Handle cluster maintenance: version upgrades, snapshots and restores, and index lifecycle policies
• Troubleshoot ingestion delays, parsing failures and cluster health issues and take part in triaging issues as they come in
• Automating existing manual work and moving infrastructure into code
• Model log data so fields are consistent and queryable across sources
• Maintain the access controls that keep log data complete, trustworthy and tamper-resistant
• Contribute to the design of our next‑generation logging platform and the SIEM that will run on it, working closely across teams to achieve this

What you may have

• Hands‑on experience running OpenSearch or Elasticsearch clusters, including scaling, tuning, upgrades and troubleshooting
• Experience building log ingestion and parsing pipelines with tools like Logstash, Fluent Bit, Opensearch Ingestion
• Familiarity with streaming services such as Kinesis, Kafka
• 3+ years working in AWS environments, with a solid understanding of how to secure them
• Working knowledge of infrastructure as code tools like Terraform or Puppet
• Ability to write Python or Ruby to automate operational work
• Strong Linux skills
• Curiosity about how security teams use log data, and a keen interest in improving your craft by using AI
• Serious bonus points if you have
• Experience with SIEM implementation or migration
• Familiarity with log schemas such as ECS or OCSF
• Hands‑on work with S3‑based data lakes, log routing or high‑volume event pipelines
• Experience with Kubernetes and/or EKS
• Infrastructure security background (firewalls, ACLs, authentication, device hardening)
• Security certifications such as AWS Certified Security – Specialty, CKS, CISSP or similar

What you will find here

Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high‑performing culture.

• Competitive, equitable salary with top‑tier health benefits, dental, and vision insurance
• Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.
• Flexible time off policy, with an encouraged 20 days off per year.
• $2000 annual counseling benefit RRSP matching and RESP contribution
• Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

The expected salary range for this role is $119,000 to $161,000 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.

Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility

Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply. Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.

Learn more about our culture at clio.com/careers.

We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.

Disclaimer: We only communicate with candidates through official @clio.com email addresses.

About Clio

Clio is on a mission to transform the legal experience for all. Clio is the global leader in legal AI, building the platform that powers the future of legal work. With the scale, data, and ambition to redefine how the legal industry operates, we are advancing a comprehensive strategy that spans the full lifecycle of legal work—from knowledge and insight to execution and outcomes. At the center of this vision is the Intelligent Legal Work Platform, the legal industry’s first System of Action. By combining Clio’s core product suite with Clio Work and AI-native capabilities, the platform turns information into insight and insight into action. As we expand into the enterprise, Clio for Enterprise extends this foundation to support the complexity, scale, and operational rigor of global organizations through solutions like Clio Operate and Vincent by Clio. Backed by industry-leading data and intelligence, Clio is building the infrastructure that enables legal teams to operate with greater speed, confidence, and impact. Clio’s leadership and momentum have been recognized globally. In 2022, we achieved Centaur status, a milestone reached by fewer than 200 private SaaS companies worldwide. We are a proud honoree of the Forbes Cloud 100 and Fortune’s Future 50, have been named Innovator of the Year, and are a Platinum Club member of Canada’s Best Managed Companies. We are consistently recognized as one of Canada’s Top 100 Employers and a Top Employer for Young People, with our international offices also earning placements on Great Place to Work’s Best Workplaces lists. Headquartered in Vancouver, Canada, Clio has grown to more than 2,000 employees across offices in Toronto, Calgary, Dublin, Manchester, Sydney, Barcelona, and Bogotá—bringing together diverse perspectives to solve one of the world’s most complex and impactful professional challenges.

Join Clio and help define the future of legal work through AI. Learn more at clio.com/careers.