Senior SOC analyst leading threat detection, investigations, and incident response for Financeit, a Canadian point - of - sale financing provider. Building its new SOC’s automation, AI - threat coverage, and operational standards.
About the role
- Security incident response manager leading responders and scaling AI-assisted security operations. Protecting 1Password’s password-management and unified access platform.
Responsibilities
- Build, lead, and develop a team of incident responders and security builders
- Set expectations, create ownership, and support team growth
- Delegate work based on team strengths, development goals, capacity, and operational needs
- Define and drive the security incident response roadmap and strategic priorities
- Mature agentic incident response, structured threat hunting, and insider risk investigations
- Balance incident response, strategic initiatives, and team development priorities
- Scale team capacity through AI-assisted tooling and automation with human judgment, approval, auditability, and rollback controls
- Oversee detection, triage, containment, remediation, and post-incident learning
- Serve as an escalation point and incident manager for complex or high-severity events
- Partner with Detection Engineering, Cyber Threat Intelligence, Red Team, and other teams to close detection and response gaps
- Evolve playbooks, training, tabletop exercises, metrics, and reporting
- Participate in the on-call rotation as leadership escalation or incident manager
- Track and report incident trends, operational metrics, program maturity, and automation/AI impact
Requirements
- 5+ years in security incident response
- 2+ years as a people manager or technical leader supporting career development and performance management
- Experience building or scaling incident response automation, tooling, or AI-assisted workflows
- Sound judgment about where automation should and should not make decisions
- Experience setting expectations, defining ownership, delegating work, and measuring outcomes
- Experience managing high-pressure security incidents
- Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response
- Strong communication skills for technical and non-technical audiences
- Experience breaking strategic initiatives into projects, coordinating team sprints, and managing competing priorities
- Passion for fostering psychological safety and stability in stressful environments
- Must already be legally authorized to work in the United States or Canada; no work authorization, relocation assistance, or visa sponsorship provided
- Successful applicants must complete a background check
Benefits
- Health benefits
- Dental benefits
- 401(k) / RRSP retirement matching program
- Generous paid time off (PTO)
- Equity grant / RSU program for most employees
- Incentive programs, where applicable
- Maternity and parental leave top-up programs
- Free 1Password account
- Paid volunteer days
- Peer-to-peer recognition through Bonusly
- Remote-first work environment
- Travel for in-person engagement, including annual department-wide offsites, team meetings, and customer/industry events
- Accommodation available upon request during recruitment
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
HRIS security analyst optimizing NBCUniversal’s global HR applications and access controls. Managing access audits, application releases, security roles, and HR systems improvements.
Security Operations Analyst supporting firewall operations and enterprise network security at CDW, a Fortune 500 technology solutions provider. Monitoring incidents, resolving client requests, and maintaining SLA performance.
Security Operations Engineer securing Tailscale’s software for safe device and network connections. Managing endpoints, identity access, platforms, automation, and data loss prevention.
Security Operations Engineer securing Tailscale’s networking platform through device, identity, access, and vulnerability management. Supporting distributed teams and automating security operations across core business systems.
Incident Response Security Engineer strengthening detection, automation, and incident management for ClickHouse’s real - time analytics cloud platform. Handling security events across products and services.
LP
Manager, Cybersecurity
LinkedIn Recruiter Post
Lead cybersecurity strategy, governance, and operations at Alberta Innovates. Oversee risk management, incident response, and team leadership in a hybrid role based in Edmonton.
Security operations manager defending Forward Financing’s fintech infrastructure and AI systems. Leading incident response, detection engineering, cybersecurity risk assessments, and AI security team development.
LP
Security Operations Specialist
LinkedIn Recruiter Post
Join a growing Ottawa - based team supporting security, compliance, and governance. Manage GoC clearances and support ISO 27001/SOC 2 compliance.
Security Training & Operations Team Lead at OLG overseeing security operations and developing training programs for personnel across various locations. Requires strong leadership in managing safety and compliance protocols.