SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
About the role
- Corporate Security Analyst protecting Clio’s legal AI platform through DLP, EDR, phishing simulations, and incident response. Maintaining compliance evidence and automating security operations.
Responsibilities
- Operate Clio’s corporate security toolset to protect against accidental and intentional internal and external threats
- Own endpoint tools, investigative processes, and organizational security culture
- Monitor alerts and triage DLP events
- Operate EDR by reviewing detections and executing response procedures
- Run phishing simulation campaigns from scheduling through employee education
- Communicate clearly when security processes or systems break
- Handle L1/L2 incidents involving phishing, device compromise, and data loss by triaging and containing threats
- Maintain runbooks and support SOC 2 and ISO 27001 compliance evidence collection
- Develop scripts for automated remediation and tune security tooling for AI detection of unauthorized data moves
- Collaborate across IT Systems, Application Security, People, Compliance, and IT Services
- Drive visibility across Clio’s security stack, including Okta, 1Password, Google Workspace, and MDM
- Adopt and unify security systems, communications, oversight, and program practices across relevant teams
Requirements
- 2-4 years of hands-on experience in a security operations, IT security, or endpoint support role
- Hands-on experience with EDR, DLP, phishing, SSO platforms, or Google Workspace security controls
- Healthy curiosity to look for the “why” and fix the problem rather than the symptom
- Clear, evidence-first written communication
- Ability to document actions, findings, and decisions
- Judgment to determine when to work independently and when to ask for help
- Keen interest in improving your craft by using AI
- Candidates local to one of Clio’s hubs: Burnaby, Calgary, or Toronto
- Hands-on familiarity with MDM or SIEM in a security incident context is a bonus
- Experience supporting SOC 2 or ISO 27001 evidence collection is a bonus
- Exposure to Python or Bash scripting for automating investigation or remediation tasks is a bonus
- Relevant certifications such as CISSP, CompTIA Security+, or CySA+ are a bonus
Benefits
- Competitive, equitable salary
- Top-tier health benefits
- Dental insurance
- Vision insurance
- Hybrid work environment
- Flexible time off policy, with an encouraged 20 days off per year
- $2000 annual counseling benefit
- RRSP matching
- RESP contribution
- Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
- Accessibility accommodations during the recruitment process
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.
Security analyst strengthening Desjardins's security posture through risk analysis, governance, and security controls. Supporting clients, partners, and cross - functional stakeholders.
Security Analyst II protecting Intact’s insurance operations through incident response and SIEM monitoring. Supporting security platforms, incident resolution, dashboards, and IT security initiatives.
Lead AI risk analyst securing CBC/Radio - Canada’s public - service media technology. Designing enterprise AI governance, risk assessments and adversarial testing across the AI lifecycle.
Senior Information Security Analyst securing TD’s technology controls, cyber risk, and regulatory compliance. Assessing vulnerabilities, supporting audits, and guiding enterprise security remediation.
IT security analyst protecting Desjardins hardware, software, data, and access controls. Analyzing vulnerabilities, risks, and security processes while developing recommendations and action plans.
Analyste cybersécurité administrant et optimisant les plateformes protégeant les services essentiels de la Ville de Montréal. Déploiement de solutions, gestion des incidents et automatisation opérationnelle.
Analyste SOC détectant les menaces et répondant aux incidents pour I - TRACING, pure - player indépendant de la cybersécurité. Exploitation SIEM, analyse de vulnérabilités et suivi de remédiation.
Staff Cybersecurity Analyst securing D - Wave’s quantum computing systems, software, and cloud services. Leading threat detection, incident response, vulnerability management, and enterprise resilience.