Senior Security Operations Engineer I

Overview

Senior Security Operations Engineer responsible for monitoring and responding to security events, leading incident response, and conducting digital forensic investigations. The role also supports security operations automation, runbooks, and process improvements.

What you'll do

• Monitor security events and technically analyze alerts.
• Lead information security incidents and employee investigations through closure.
• Develop incident response strategies and provide stakeholder updates.
• Deliver security guidance for incident response and insider threat initiatives.
• Coordinate services, integrations, and technology implementations for security operations.
• Create and maintain runbooks and automated workflows.
• Mentor security operations engineers on data collection, analysis, and reporting.

What you'll need

• 5+ years of experience in security incident response.
• Proficiency in Python for investigation scripts or tools.
• Experience leading security incident response and coordinating across teams.
• Understanding of forensics techniques on macOS, Windows, and Linux.
• Experience using SIEM tools for log reviews.
• Experience with AWS, GCP, and cloud-based security services.
• Ability to communicate findings to technical, executive, and legal audiences.

Nice to have

• 3+ years working on insider threat initiatives or employee investigations.
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• GIAC Certified Incident Handler certification.
• Familiarity with NIST Cybersecurity Framework, ISO 27001, and FedRAMP.

Details

• Remote role open to candidates residing in Canada.
• Must reside in the Pacific, Mountain, or Central Time Zone of the United States or Canada.
• Annual base salary: CAD 132,600–171,600.