About the role

Lead threat intelligence for Clio’s legal AI platform, tracking adversaries, fraud, and abuse. Building intelligence capabilities that protect law firms and Clio Payments.

Responsibilities

Define and maintain Clio's Priority Intelligence Requirements across Security, Trust, Payments, and leadership
Run the full intelligence lifecycle from requirements through dissemination and feedback
Stand up Clio's threat intelligence platform as the system of record for tracked actors, campaigns, and indicators
Shape vendor purchases and tooling rollouts for OSINT, dark-web monitoring, feeds, and enrichment
Measure intelligence impact through SIEM detection coverage, Red Team campaign success, and time-to-detect
Track external threat actors, techniques, and infrastructure relevant to legal tech and Clio's customers
Produce tactical, operational, and strategic intelligence
Establish and refine methodology for tracking adversary campaigns
Conduct infrastructure hunting, malware analysis, and campaign attribution
Analyze fraud, abuse, insider-threat, BEC, and trust-account wire-fraud patterns
Provide prioritized intelligence to the Red Team and detection engineer
Brief security leadership, SOC, and engineering teams
Alert Payment Operations to external fraud signals and malicious infrastructure
Manage commercial threat-intelligence vendors and evaluate new vendors
Participate in industry intelligence-sharing groups and represent Clio
Collaborate and code with the blue team on defensive remediations
Mentor newer analysts

5+ years in threat intelligence or a closely adjacent function, with original research you can point to
Experience establishing or scaling a security function/team from the ground up
Scripting ability (Ruby, Python, or similar) for building, upgrading, and maintaining automation
Fluency with MITRE ATT&CK, the Diamond Model, and structured analytic techniques such as Analysis of Competing Hypotheses
Track record of establishing or materially improving a tracking methodology someone else now uses
Comfort briefing both technical teams and director+ level, and adjusting the message for each
Ability to turn raw intelligence into a specific, actionable ask for another team
Fluency with AI tooling in analytical work, including agents for collection, enrichment, and drafting, and judgment to validate outputs
Experience mentoring more junior analysts

Competitive, equitable salary
Top-tier health benefits, dental, and vision insurance
Hybrid work environment
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
Accessibility accommodations during the recruitment process