Senior Threat Intelligence Architect

Clio; Calgary; Hybrid; CAD 157,000 - 213,000; Full time

Benefits offered by this job

Hybrid work environment

Flexible time off policy

Dental and vision insurance

RRSP matching

Counseling benefit

Job summary

Clio, the global leader in legal AI technology, is seeking a senior threat intelligence professional in Calgary to stand up a dedicated threat intelligence program. You will define intelligence requirements, establish a platform, and collaborate with red team and detection engineers to shape detection logic in the SIEM.

You’ll produce actionable intel, track external threats to legal tech, and mentor junior analysts.

Qualifications

• 5+ years in threat intelligence or a closely adjacent function, with original research you can point to.
• Experience establishing or scaling a security function/team from scratch; self-starter.
• Scripting ability for automation (Ruby, Python or similar).
• Fluency with MITRE ATT&CK, Diamond Model, and analytic techniques.
• Ability to turn raw intelligence into actionable asks for other teams.

Responsibilities

• Define and maintain Priority Intelligence Requirements across security, trust, payments, and leadership.
• Stand up threat intelligence platform and make it the system of record for actors, campaigns, and indicators.
• Shape vendor purchases and tooling for OSINT and dark-web monitoring.
• Measure impact on detection coverage, campaign success, and time-to-detect.

Skills

Threat intelligence

Build security function

Ruby/Python scripting

MITRE ATT&CK

Analytic methods

Mentoring analysts

Executive briefing

Tools

Splunk

ELK/OpenSearch

Dark-web monitoring tools

Job description

Clio, the global leader in legal AI technology, is seeking a senior threat intelligence professional in Calgary to stand up a dedicated threat intelligence program. You will define intelligence requirements, establish a platform, and collaborate with red team and detection engineers to shape detection logic in the SIEM.

You’ll produce actionable intel, track external threats to legal tech, and mentor junior analysts.