Senior Threat Intelligence Architect

Clio; Vancouver; Hybrid; CAD 157,000 - 213,000; Full time

Benefits offered by this job

Hybrid work environment

20 days off per year

$2000 annual counseling benefit

RRSP matching

RESP contribution

Clioversary recognition program

Job summary

Clio is hiring for a senior threat intelligence contributor to establish and formalize how we track adversaries in the legal-tech space. You will shape a program that becomes the foundation for future teams, collaborating closely with Red Team and detection engineers to translate intelligence into detection and response.

You will drive intelligence across detection, leadership briefs, and external partnerships, mentoring analysts and evolving our methods as the program scales, with a strong

Qualifications

• 5+ years in threat intelligence or a closely adjacent function with original research to show for it.
• Experience establishing or scaling a security function from the ground up, not just operating within an existing one.
• Scripting ability (Ruby, Python, or similar) for automation.
• Fluency with MITRE ATT&CK, the Diamond Model, and structured analytic techniques.
• Track record of improving a tracking methodology used by others.
• Comfort briefing both technical teams and leadership at director+ level.
• Ability to turn raw intelligence into actionable requests for other teams.
• Fluency with AI tooling in analytical work and judgment to validate outputs.
• Experience mentoring junior analysts.

Responsibilities

• Define and maintain Clio's Priority Intelligence Requirements across Security, Trust, Payments, and leadership.
• Stand up Clio's threat intelligence platform as the system of record for actors, campaigns, and indicators.
• Shape vendor purchases and tooling as collection needs form.
• Measure intelligence impact on detection coverage, Red Team outcomes, and time-to-detect.

Skills

Threat intelligence

Team building

Scripting (Ruby/Python)

MITRE ATT&CK

Adversary tracking

Briefing executives

Automation tooling

Mentoring

Tools

Splunk

ELK/OpenSearch

SIEM

Python/Ruby

Job description

Clio is hiring for a senior threat intelligence contributor to establish and formalize how we track adversaries in the legal-tech space. You will shape a program that becomes the foundation for future teams, collaborating closely with Red Team and detection engineers to translate intelligence into detection and response.

You will drive intelligence across detection, leadership briefs, and external partnerships, mentoring analysts and evolving our methods as the program scales, with a strong