jobapplier

Security Engineer (Logging Platform)

Clio

Skills

Required

  • Opensearch
  • Ingestion
  • Infrastructure security
  • parsing
  • Logstash
  • AWS environments
  • AI
  • Terraform / Puppet
  • Kafka
  • Elasticsearch
  • Python / Ruby
  • Kubernetes / EKS

Preferred

  • AWS
  • SIEM implementation / migration
  • log schemas
  • ECS / OCSF
  • CKS
  • CISSP

Join Clio, a rapidly growing security team, as an Infrastructure Security Engineer. In this role, you will be responsible for building proactive security solutions, implementing detection capabilities, and driving security automation at scale. You will work on the logging team, ensuring timely ingestion, proper transformation, and high availability of logging data. You will also contribute to the design of the next-generation logging platform and the SIEM that will run on it.

Onboard new log sources end to end: collect the data, parse and normalize it, and land it in OpenSearch.

Scale and tune our OpenSearch clusters in AWS, including node sizing, shard and index strategy, and storage tiers.

Automate existing manual work and move infrastructure into code, contributing to the design of our next-generation logging platform.

Are you someone who is always probing and asking why, someone who enjoys finding smarter and more efficient solutions to problems? If so, we have a spot for you on Clio's security team. If you have a strong operations background with a passion for security and experience in cloud-first environments, then we want to talk to you

Requirements

  • Experience building log ingestion and parsing pipelines with tools like Logstash, Fluent Bit, Opensearch Ingestion
  • 3+ years working in AWS environments, with a solid understanding of how to secure them
  • Curiosity about how security teams use log data, and a keen interest in improving your craft by using AI
  • Working knowledge of infrastructure as code tools like Terraform or Puppet
  • Strong Linux skills

Familiarity with streaming services such as Kinesis, Kafka

  • Hands-on experience running OpenSearch or Elasticsearch clusters, including scaling, tuning, upgrades and troubleshooting
  • Ability to write Python or Ruby to automate operational work

Experience with Kubernetes and/or EKS

  • Hands-on work with S3-based data lakes, log routing or high-volume event pipelines
  • Infrastructure security background (firewalls, ACLs, authentication, device hardening)

Preferred

Experience with SIEM implementation or migration

  • Familiarity with log schemas such as ECS or OCSF
  • Security certifications such as AWS Certified Security – Specialty, CKS, CISSP or similar

Every job at Clio