Senior Corporate Security & Incident Response Lead

Clio; Burnaby, Calgary, Toronto; Hybrid; CAD 106,000 - 144,000; Full time

Job summary

Clio is seeking a Senior CorpSec Analyst to drive cybersecurity posture across our fleet and systems. You will own end-to-end detection and response, lead high-severity incidents, and raise the operational bar of the team.

You will coach junior analysts, collaborate with IT, Compliance, and People teams, and shape playbooks and automation. AI tooling proficiency is expected and encouraged.

Qualifications

• 5–8 years of hands-on experience in security operations, detection engineering, or incident response.
• Deep hands-on experience with at least three of: EDR, DLP, Phishing platforms, SIEM, or Google Workspace security controls.
• Demonstrated experience leading security incidents end-to-end.
• Track record of root-cause investigation and translating fixes into durable controls or automation.
• Strong written communication; runbooks and post-incident reviews should be easy to follow.
• Experience coaching or mentoring junior analysts.
• Comfort with ambiguity and a growth mindset for AI-driven security.

Responsibilities

• Lead investigations and incident response for medium- and high-severity security events, from triage to post-incident review.
• Own detection engineering across the security stack; tune signals, build rules, reduce false positives without sacrificing coverage.
• Drive root-cause analysis after incidents and near-misses; translate findings into durable runbooks and tooling.
• Build and maintain automations and integrations that move work left with auto-remediation playbooks.
• Define and evolve incident response playbooks for insider threat, compromised device, and data-loss scenarios.
• Partner with CorpSec leadership on tooling decisions across EDR, DLP, phishing, SIEM, and SOAR.
• Tune security tooling for AI detection and manage risks of AI-driven workflows.
• Drive visibility across Clio's security stack to stay timely as the company grows.

Skills

Security operations

Detection engineering

Incident response

EDR

DLP

Phishing platforms

SIEM

Workspace security

Incident commander

Root-cause analysis

Automation

Mentoring

Education

CISSP

CISM

GCIH

GCIA

CompTIA Security+

Tools

SIEM pipelines

Python scripting

Detection-as-code

Job description

Clio is seeking a Senior CorpSec Analyst to drive cybersecurity posture across our fleet and systems. You will own end-to-end detection and response, lead high-severity incidents, and raise the operational bar of the team.

You will coach junior analysts, collaborate with IT, Compliance, and People teams, and shape playbooks and automation. AI tooling proficiency is expected and encouraged.