Engineer, Clio

• If you have a strong background in security analytics with experience in log analysis and detection engineering, then we want to talk to you
• Proven expertise building detection capabilities and security monitoring systems, typically gained over 3+ years of relevant experience
• Query language proficiency in Elasticsearch/Lucene, SQL, KQL (Kusto), SPL (Splunk), or similar query languages
• Detection engineering experience creating rules, alerts, and automated response workflows for security events
• Log analysis skills across multiple data sources including cloud logs, application logs, and security tool outputs
• Dashboard and visualization experience with Kibana, Grafana, Tableau, or custom analytics interfaces
• Threat hunting expertise using log data to proactively identify security threats and anomalous behavior
• Scripting and automation abilities in Python, PowerShell, or similar languages for detection automation
• Security tools integration experience with SIEM platforms, SOAR tools, and security orchestration
• Performance optimization skills for query tuning, index optimization, and resource-efficient analytics
• Incident response support experience investigating alerts and providing technical analysis for security incidents

Desirable

• Are you someone who's always probing and asking why, someone who enjoys finding patterns in data and building smarter detection logic? If so, we have a spot for you on Clio's new Logging Engineering team! We are looking for the right candidate to develop and optimize our security detection capabilities, and be a technical expert in query optimization and analytics
• Design and implement sophisticated detection rules and queries across ELK stack, security data lakes, and cloud logging platforms
• Build and optimize complex search queries, aggregations, and analytics dashboards for security monitoring
• Develop automated detection workflows and integrate detection logic with incident response systems
• Partner with the security team to translate threat intelligence into actionable detection capabilities
• Create and maintain detection rule libraries, query templates, and security analytics playbooks
• Optimize query performance and resource utilization across large-scale log datasets
• Build custom visualizations, dashboards, and reporting capabilities for security stakeholders
• Investigate security alerts, perform threat hunting, and refine detection accuracy to reduce false positives
• Collaborate with the platform team to influence logging architecture based on detection requirements
• Stay current with emerging threats and translate new attack patterns into detection logic