Senior Infrastructure Security Engineer

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely. We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.Summary:We are currently seeking a Senior Infrastructure Security Engineer to join our rapidly growing Security team. This role is for someone passionate about building proactive security solutions, implementing detection capabilities, and driving security automation at scale. You will be exposed to new challenges and technologies while making a tangible impact. This role is open to candidates across North America (US and Canada). If you are located near one of our hubs (Burnaby, Calgary, or Toronto), you will be expected to work in the office a minimum of twice per week on our designated Anchor Days.Who you are:Are you someone who’s always probing and asking why, someone who enjoys finding smarter and more efficient solutions to problems? If so, we have a spot for you on Clio’s security team! We are looking for the right candidate to develop and run our security architecture and engineering program, and be an advocate and advisor for security overall. If you have a strong operations background with a passion for security and experience in cloud-first environments, then we want to talk to you.A day in the life might look like:Implement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security, EC2 hardening, and cloud-native protectionPartner with the cloud security manager to plan and develop the team’s road mapDevelop and tune rules for cloud-specific threats, manage GuardDuty/Defender integration, and build automated response workflowsInvestigate potential security incidents and serve as initial incident responderProvide architectural guidance for securing our user environments and maintaining a good security postureSecure Kubernetes workloads, implement pod security standards, and integrate security scanning into CI/CD pipelinesStay up-to-date with current methods of cloud compromise, tools, tactics, and proceduresWork in a small team where you can make a big impactWhat you may have:Cloud Security expertise with 3+ years in securing AWS environmentsHands-on expertise with Kubernetes and/or EKS, including autoscaling, CI/CD, and automationAdept at using IaC technologies like Terraform, Puppet, CloudFormation, or AnsibleSkilled in securing cloud infrastructure such as AWS, GCP/GSuite, GitHub, and IdPFamiliarity in a cloud-first organization, including experience with AWS and/or GCPAbility to program in a dynamic programming language: Python, RubyStrong understanding of threat vectors, indicators of compromise, malicious behaviour identification, and emerging threat analysis.Strong Linux experienceDemonstrate a keen interest in improving your craft by using AISerious bonus points if you have:Strong Azure and/or GCP security experien...