Find work in Canada.

317,657 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 6 hours ago
A
Business Analyst – AI and Digital Product Delivery [AQ-20669]
Aquent
Toronto, ON
- $51 to $64 CAD / hour
- Contract
Provide clear updates to business partners, Product leadership, and senior stakeholders.
Added 7 hours ago
SG
Rating Analyst – Infrastructure & Project Finance Ratings, Toronto or Mexico City
S&P Global
Toronto, ON
- Full-time
…analysis with broad market insight, partnering closely with senior analytical leadership and global colleagues to advance rating quality, research, and analytical innovation. This is a…
Added 11 hours ago
SG
Rating Analyst – Infrastructure & Project Finance Ratings, Toronto or Mexico City
S&P Global
Toronto, ON
- Full-time
…analysis with broad market insight, partnering closely with senior analytical leadership and global colleagues to advance rating quality, research, and analytical innovation. This is a…
Added 13 hours ago
M
Senior Data Analyst I, Product
Mistplay
Toronto, ON
- Full-time
The Senior Data Analyst I, Product within Mistplay's Data department will play a crucial role in enhancing Mistplay's business performance through insightful analysis and driving analytics…
Added 13 hours ago
T
Modelling / Forecasting Senior Analyst (Quants)
TD
Toronto, ON · Markham, ON
- Full-time
…LRM and liquidity risk management and share knowledge with business partners and senior…
Added 13 hours ago
AI
Data Analyst (Contract, 6 months)
Ainsworth Inc
Mississauga, ON
- Full-time
We are seeking a highly motivated and detail-oriented Data Analyst to join our data-driven team. As a Data Analyst, you will play a crucial role in supporting data-related activities within…
Added 15 hours ago
SM
RQ11650 – Scrum Master – Senior
S M Software Solutions Inc
Toronto, ON
- Internship
We are seeking a Senior Scrum Master with strong experience in Agile methodologies, Scrum practices, business analysis, DevOps environments, CI/CD pipelines, requirements gathering,…
Added 15 hours ago
SM
RQ11650 – Scrum Master – Senior
S M Software Solutions Inc
Toronto, ON
- Internship
We are seeking a Senior Scrum Master with strong experience in Agile methodologies, Scrum practices, business analysis, DevOps environments, CI/CD pipelines, requirements gathering,…
Added 15 hours ago
SM
RQ11650 – Scrum Master – Senior
S M Software Solutions Inc
Toronto, ON
- Internship
We are seeking a Senior Scrum Master with strong experience in Agile methodologies, Scrum practices, business analysis, DevOps environments, CI/CD pipelines, requirements gathering,…
Added 22 hours ago
NB
Chief Analyst, Capital Transformation
National Bank of Canada
Montreal, QC
- Temporary
Required skills: Artificial Intelligence, Automation, Business Process Improvement, Change & Transformation, Cybersecurity, Diversity & Inclusion, Empathy, Initiative, Learning Agility,…
Added 1 day ago
R
Senior Manager, Risk Management & Compliance
RBC
Halifax, NS · Toronto, ON
- Full-time
Act as a key risk analyst and advisor to all teams under Enterprise Platform Services in RBC Tech Infrastructure with respect to Network & Collaboration Services, Shared Platform Services,…
Added 1 day ago
DM
IT Support Analyst II
Discovery Mining Ltd
South Porcupine, ON
- $87,000 to $90,000 CAD / year
- Full-time
The IT Support Analyst II is responsible for providing technical support and troubleshooting services to employees across mine sites and administration offices. The role supports the…
Added 1 day ago
T
Senior Salesforce Analyst, Marketing Delivery
TD
Toronto, ON
- Full-time
Analytics, Insights, & Artificial Intelligence
Added 1 day ago
MF
Senior Portfolio Analyst
Mackenzie Financial Corporation
Toronto, ON · Greater Toronto Area, ON
- Other
Reporting to the Director, Portfolio Analytics, the Senior Portfolio Analyst will be a key contributor on the team responsible for delivering timely, accurate and scalable portfolio…
Added 1 day ago
IF
Actuarial Analyst - 4 Month Co-Op/Internship (Winter 2027,Summer 2027 & Fall 2027)
Intact FC
Laval, QC · Montreal, QC · Quebec, QC · Saint-Hyacinthe, QC
- Full-time
Ongoing university studies in one of the following fields: Actuarial Science, Statistics, Mathematics, Business Intelligence, or a related discipline.
Added 1 day ago
HH
Senior Financial Analyst, Financial Services & Special Projects
Halton Healthcare
Oakville, ON
- Full-time
The Senior Financial Analyst, Financial Services & Special Projects provides senior-level analytical, reporting, operational, systems, and project support across all Financial Services…
Added 1 day ago
RB
Senior Manager, Risk Management & Compliance
Royal Bank of Canada
Halifax, NS · Toronto, ON
- Full-time
Act as a key risk analyst and advisor to all teams under Enterprise Platform Services in RBC Tech Infrastructure with respect to Network & Collaboration Services, Shared Platform Services,…
Added 1 day ago
OO
Financial Accounting, Reporting, and Systems Analyst, Financial Analyst
Office of the Superintendent of Financial Institutions Canada
Ottawa, ON · Toronto, ON
- Full-time
Reporting to the Manager, Financial Planning and Analysis, the Financial Analyst provides financial planning, budgeting, forecasting, reporting, and advisory services to support effective…
Added 1 day ago
QP
Manager, AI Delivery
QuadReal Property Group
Calgary, AB · Vancouver, BC · Toronto, ON
- Full-time
The AI & Digital Innovation team builds and runs AI products used across QuadReal, from document intelligence and underwriting support to agentic workflows connected to our core platforms.…
Added 1 day ago
B
Senior FP&A Analyst
Behavox
Montreal, QC
- Full-time
The Senior FP&A Analyst owns Behavox's core financial model - its architecture, the accounting beneath it, and the forecasts and analysis the company plans and decides by. The role exists…
Added 1 day ago
DH
Business Intelligence Analyst
Designer Health Centers
Winnipeg, MB
- Full-time
This is a highly analytical and business-focused role working directly with ODRA's senior leadership team and company owners. The Business Intelligence Analyst is responsible for…
Added 1 day ago
B
Senior FP&A Analyst
Behavox
Toronto, ON
- Full-time
The Senior FP&A Analyst owns Behavox's core financial model - its architecture, the accounting beneath it, and the forecasts and analysis the company plans and decides by. The role exists…
Added 1 day ago
E
HR Service Center Analyst
Extendicare
Markham, ON · Extendicare (Canada) Inc (Steeles Ave.)
- Full-time
Reporting to the Senior Manager, Employee Service Centre, the HR Service Centre Analyst serves as the first point of contact for employees and managers seeking support on a broad range of…
Added 1 day ago
E
Senior Analyst, Data Engineering & AI
Experis
Canada
- Contract
We are seeking a motivated and technically strong Senior Analyst, Data & AI to join our growing Data & AI practice.
Added 1 day ago
T
Senior Financial Analyst
TD
Toronto, ON
- Full-time
The Senior Finance Analyst role provides meaningful financial support to various teams within the CPB Operations, COO & Digital Transformation businesses.

Closed listing

CapitalG

Lead Threat Intelligence Engineer

Toronto, ON, Canada

Full-time

This opening has closed.

The original listing is kept below for reference.

Find open jobs More jobs with this employer

About employer

Job details

Job type: Full-time
Closing date: Nov 1, 2026
Posting language: English
Posted: Oct 2, 2026

Similar jobs hiring now

Added 2 days ago
Lead Threat Intelligence Engineer
Clio · Toronto, ON, Canada
Added 2 days ago
Security Engineer (17-Month Contract)
Spectrum Equity · Toronto, ON, Canada
Added 3 days ago
Security Engineer (17-Month Contract)
Varicent · Toronto, ON, Canada
Added 3 days ago
Security Engineer (17-Month Contract)
Varicent · Toronto, ON, Canada

Search current openings

Original job description

Archived listing. The details below describe a past opening.

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.

We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.

Summary

The Role

Clio is looking to build a dedicated threat intelligence capability. Today, adversary tracking, fraud pattern analysis, and abuse intelligence happen informally across a few teams. This role makes threat intelligence a standing discipline: characterize who is targeting Clio and organizations like it, what they're using, and turn that into work other teams can act on.

This is a senior individual-contributor role, where you'll be expected to establish and formalize how Clio tracks adversaries. This is the first hire in a function Clio intends to grow - the practices you establish become the foundation the rest of the team is built on.

You will work closely with Clio's internal red team and detection engineer. Threat Intelligence characterizes the adversary - who they are, how they operate, what to watch for. The Red Team takes your prioritized, evidence-backed picture of the threat and decides what to simulate and attack; the detection engineer turns the same picture into detection logic in our SIEM. As the detection platform matures, your intelligence requirements shape what gets built.

What We're Protecting Firms From

Clio has nearly every piece of data you can conceive: privileged litigation strategy, M&A documents, and trust accounts that can get a lawyer disbarred if they're not protected properly! The Panama Papers breach showed the stakes - 11.5 million client documents left Mossack Fonseca, and the firm shut down two years later. The legal field is rife with examples where security must be taken seriously:

Silent Ransom Group (Luna Moth) has extorted more than 100 US law firms since 2023, using IT-themed vishing calls and, recently, operatives who walk into firm offices posing as IT technicians (FBI advisories, 2025 and 2026)
INC Ransom claimed 20 legal-sector victims in 2026, ten of them inside a single 48-hour window
Chinese state actors breached Williams & Connolly and Wiley Rein to reach trade, sanctions, and M&A matters; Mandiant estimates 80 of the 100 largest US firms have been hacked since 2011

Most of Clio's customers are solo, small, and mid-size firms - the segment with the highest breach rate (ABA 2025 data) and the least in-house security. At the same time some of the largest legal organizations, including governments, rely on Clio. When you characterize an adversary, you protect tens of thousands of firms that cannot do this work themselves!

AI Is The Expectation

Clio's security team works with AI every day, and this role is built on that assumption. You'll use AI agents to scale collection, enrichment, triage, and first-draft reporting - and apply your own judgment to everything they produce. The adversary side is part of your beat too: AI-enabled tradecraft belongs in the landscape you cover. If the idea of directing a fleet of agents sounds like how intelligence work should be done, you'll fit perfectly at Clio.

A Day in the Life

Digging through raw infrastructure data to attribute a phishing kit to a known actor before any vendor report names them
Briefing security leadership team on a geopolitical or sector-specific threat trend relevant to legal tech
Writing fraud pattern briefs from account-abuse signals and handing the Trust (anti-abuse) function specific patterns to detect
Working with our payment operations group to identify fraud patterns and rings within Clio Payments
Mentoring newer analysts on how to separate a credible early indicator from noise
Proposing a new data source or tracking method because the current one is missing a class of activity

What You'll Do

Building the program

Define and maintain Clio's Priority Intelligence Requirements with stakeholders across Security, Trust, Payments, and leadership, then run the full intelligence lifecycle against them - from requirements through dissemination and feedback
Stand up Clio's threat intelligence platform and make it the system of record for tracked actors, campaigns, and indicators
Shape vendor purchases and tooling rollouts - OSINT and dark-web monitoring, feeds, enrichment - as the program's collection needs take form
Measure whether intelligence changes outcomes: detection coverage in the SIEM (Splunk, ELK/OpenSearch), Red Team campaign success grounded in your reporting, and time-to-detect on incidents with prior intel coverage

Intelligence production

Track external threat actors, techniques, and infrastructure relevant to legal tech and Clio's customer base
Produce intelligence at three tiers: tactical indicators and TTPs for detection, operational campaign briefs for security leadership, and strategic landscape assessments for executives
Establish and refine Clio's methodology for tracking adversary campaigns, rather than running someone else's playbook
Produce original research: infrastructure hunting from raw data, malware and campaign attribution
Analyze fraud and abuse patterns and insider-threat signals, and turn them into briefs the Trust (anti-abuse) function can act on
Track BEC and trust-account wire-fraud tradecraft targeting law firms, and feed it into fraud detection for Clio Payments
Assess coordinated disclosure and patch-storm events for real exploitation urgency

Feeding other teams

Hand Red Team a prioritized, evidence-backed list of techniques worth simulating
Hand our detection engineer intel-backed detection requirements
Brief security leadership directly, in addition to the SOC and engineering teams
Alert Payment Operations of external signals: tracked actors, fraud rings, known malicious domains/IPs, etc. to filter fraud from our payments business before they can act

External relationships

Manage commercial threat-intel feed vendors and evaluate new ones against cost and signal quality
Participate in industry intel-sharing groups and represent Clio in those relationships
Collaborate and code with the blue team on defensive remediations

What You Bring

5+ years in threat intelligence or a closely adjacent function, with original research you can point to
Experience establishing or scaling a security function/team from the ground up, not just operating inside an existing one. Self-starter.
Scripting ability (Ruby, Python, or similar) for building, upgrading, and maintaining automation
Fluency with MITRE ATT&CK, the Diamond Model, and structured analytic techniques such as Analysis of Competing Hypotheses, applied in your own analysis
Track record of establishing or materially improving a tracking methodology someone else now uses
Comfort briefing both technical teams and director+ level, and adjusting the message for each
Ability to turn raw intelligence into a specific, actionable ask for another team - a detection to write, a technique to simulate, a vendor risk to flag
Fluency with AI tooling in analytical work - agents for collection, enrichment, and drafting - and the judgment to validate what they produce
Experience mentoring more junior analysts

Bonus Points

Existing relationships in industry intel-sharing communities
Experience with fraud or insider-threat analysis in addition to external threat tracking, or financial services cybercrime experience
Familiarity with the legal-tech or professional-services threat landscape, or ability to build that context quickly

This role is a backfill for an existing position.

What You Will Find Here

Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.

Some Highlights Of Our Total Rewards Program Include

Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.
Flexible time off policy, with an encouraged 20 days off per year.
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

The expected salary range for this role is $157,300 to $212,800 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.

Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility

Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply.

Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.

Learn more about our culture at clio.com/careers

We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.

Disclaimer: We only communicate with candidates through official @clio.com email addresses.

About employer

More about this job

Responsibilities

Establish and lead Clio’s threat intelligence program, including defining intelligence requirements, building its platform and tracking methodology, and producing tactical, operational, and strategic intelligence. Translate evidence-backed findings about adversaries, fraud, and abuse into actionable guidance for detection engineering, the red team, Trust, Payments, and security leadership.

Requirements

Candidates need at least five years of threat intelligence or an adjacent discipline, original research, and experience establishing or scaling a security function. They should be able to script automation, apply established intelligence frameworks and analytic methods, brief technical and senior audiences, mentor analysts, and use AI tools while validating their output.

Skills

Threat Intelligence
Adversary Tracking
Threat Hunting
Fraud and Abuse Analysis
Malware and Campaign Attribution
OSINT
MITRE ATT&CK
Diamond Model
Structured Analytic Techniques
Python or Ruby Scripting
Security Automation
SIEM Detection Engineering
AI-Assisted Analysis
Intelligence Briefing
Stakeholder Communication
Analyst Mentoring

Benefits

Health Insurance
Dental Insurance
Vision Insurance
Flexible Time Off
Annual Counseling Benefit
RRSP Matching
RESP Contribution
Clioversary Recognition Program

Visa sponsorship

Not detected in the job text

Keywords

Threat Intelligence
Priority Intelligence Requirements
Intelligence Lifecycle
Threat Intelligence Platform
OSINT
Dark-Web Monitoring
MITRE ATT&CK
Diamond Model
Analysis of Competing Hypotheses
Python
Ruby
AI Agents
Splunk
ELK
OpenSearch
SIEM
Red Team
Detection Engineering
Threat Hunting
Adversary Attribution
Malware Analysis
Fraud Detection
Business Email Compromise
Insider Threat
Trust-Account Wire Fraud
Threat Feeds
Indicator Enrichment
Campaign Analysis
Coordinated Disclosure
Cybercrime

Report this job