Security Logging Platform Engineer - Cloud & SIEM

Clio; Vancouver; Hybrid; CAD 119,000 - 161,000; Full time

Benefits offered by this job

Health benefits

Hybrid work

20 days off per year

Counseling benefit

Job summary

Clio is seeking an Infrastructure Security Engineer to join our Security team in Canada. You will build proactive security solutions, drive automation at scale, and own the logging platform from ingestion to SIEM design. Hybrid in-office cadence preferred for Anchor Days in Vancouver, Calgary, or Toronto.

You’ll work on OpenSearch clusters, log ingestion pipelines, and cloud security in AWS, with Terraform/Puppet for IaC and a strong Linux foundation. AI-driven improvements encouraged.

Qualifications

• Hands-on experience running OpenSearch or Elasticsearch clusters, including scaling, tuning, upgrades and troubleshooting.
• Experience building log ingestion and parsing pipelines with tools like Logstash, Fluent Bit, Opensearch Ingestion
• Familiarity with streaming services such as Kinesis, Kafka
• 3+ years working in AWS environments, with a solid understanding of how to secure them
• Working knowledge of infrastructure as code tools like Terraform or Puppet
• Ability to write Python or Ruby to automate operational work
• Strong Linux skills
• Curiosity about how security teams use log data, and a keen interest in improving your craft by using AI

Responsibilities

• Onboard new log sources end to end: collect the data, parse and normalize it, and land it in OpenSearch
• Scale and tune our OpenSearch clusters in AWS, including node sizing, shard and index strategy, and storage tiers
• Handle cluster maintenance: version upgrades, snapshots and restores, and index lifecycle policies
• Troubleshoot ingestion delays, parsing failures and cluster health issues and take part in triaging issues as they come in
• Automating existing manual work and moving infrastructure into code
• Model log data so fields are consistent and queryable across sources
• Maintain the access controls that keep log data complete, trustworthy and tamper-resistant
• Contribute to the design of our next-generation logging platform and the SIEM that will run on it, working closely across teams to achieve this

Skills

OpenSearch/Elasticsearch

Log ingestion pipelines

AWS (3+ years)

Python or Ruby

Linux

Security logging

AI in security

Tools

Logstash

Fluent Bit

OpenSearch Ingestion

Kinesis

Kafka

Terraform

Puppet

Kubernetes

EKS

Job description

Clio is seeking an Infrastructure Security Engineer to join our Security team in Canada. You will build proactive security solutions, drive automation at scale, and own the logging platform from ingestion to SIEM design. Hybrid in-office cadence preferred for Anchor Days in Vancouver, Calgary, or Toronto.

You’ll work on OpenSearch clusters, log ingestion pipelines, and cloud security in AWS, with Terraform/Puppet for IaC and a strong Linux foundation. AI-driven improvements encouraged.