1 day ago
Remote, Canada +3 moreStaff+
Responsibilities
- Define and maintain Priority Intelligence Requirements across Security, Trust, Payments, and leadership and run the full intelligence lifecycle.
- Establish Clio’s threat intelligence platform, tracking methodology, collection strategy, and vendor/tooling program.
- Research threat actors, campaigns, infrastructure, malware, phishing kits, fraud rings, BEC, insider threats, and legal-sector cybercrime.
- Produce tactical indicators and TTPs, operational campaign briefs, and strategic threat landscape assessments.
- Provide actionable intelligence requirements to detection engineering, the red team, SOC, engineering, Trust, Payment Operations, and security leadership.
- Measure intelligence impact through detection coverage, red-team outcomes, and time-to-detect improvements.
- Manage commercial threat-intelligence vendors and participate in industry intelligence-sharing relationships.
- Collaborate and code with the blue team on defensive remediations and mentor newer analysts.
Requirements
- 5+ years of experience in threat intelligence or a closely adjacent function, with original research to demonstrate.
- Experience establishing or scaling a security function or team from the ground up.
- Scripting ability in Ruby, Python, or a similar language for automation.
- Fluency with MITRE ATT&CK, the Diamond Model, and structured analytic techniques such as Analysis of Competing Hypotheses.
- Track record of creating or materially improving a tracking methodology used by others.
- Ability to brief technical teams and director-level or higher stakeholders and tailor the message to the audience.
- Ability to turn raw intelligence into specific, actionable requests for other teams.
- Experience using AI tooling for collection, enrichment, and drafting, with judgment to validate its output.
- Experience mentoring more junior analysts.
- Preferred: relationships in industry intelligence-sharing communities; fraud, insider-threat, or financial-services cybercrime experience; and familiarity with the legal-tech or professional-services threat landscape.
Benefits
- Competitive salary with top-tier health, dental, and vision insurance.
- Hybrid work environment; local employees in Vancouver, Calgary, Toronto, Dublin, London, New York City, and Sydney are expected in the office at least twice per week.
- Flexible time off policy with an encouraged 20 days off per year.
- $2000 annual counseling benefit.
- RRSP matching and RESP contribution.
- Clioversary recognition at 3, 5, 7, and 10 years.
About Clio
Clio builds cloud-based legal practice management and client intake software for law firms, sold by subscription with integrated payments. Its products include Clio Manage, Clio Grow, and tools for time tracking, billing, document and case management. Founded in 2008 and headquartered in Burnaby, BC, Clio says it serves customers in 130+ countries and is approved by over 100 bar associations and law societies.