Corporate Security Operations Lead managing security operations for Carbon60 in a hybrid environment. Involves monitoring, incident response, and security controls across cloud and internal systems.
Responsibilities
Monitor and manage Carbon60’s cloud‑delivered security tooling, including: Coralogix for centralized security logging, alerting, and managed 24×7 monitoring, CrowdStrike Falcon for endpoint detection and response Reco for SaaS security posture management
Act as the primary internal escalation point for security alerts, including triage and investigation of alerts escalated by the Coralogix 24×7 monitoring team.
Assess alert impact and severity, determine required response actions, and coordinate containment and remediation with IT Operations and platform teams.
Produce regular operational security metrics and reporting, including incident trends, response times, tooling coverage, and posture indicators.
Ensure comprehensive security logging coverage across all systems and services used by Carbon60 employees, including: Corporate IT systems, Datacenter infrastructure, AWS and Azure environments, Identity platforms and key SaaS applications
Validate that logs are properly onboarded, normalized, retained, and searchable within Coralogix.
Own and monitor security controls across identity and productivity platforms, including: Okta, Microsoft 365, Google Workspace
Own the end‑to‑end vulnerability management program for Carbon60’s internal environments.
Act as Carbon60’s internal security lead for external penetration testing and red‑team engagements focused on core internal environments.
Requirements
4–7+ years of experience in security operations, vulnerability management, or infrastructure security
Prior experience working in a managed services provider (MSP) environment
Hands‑on experience with: CrowdStrike Falcon, Coralogix or similar SIEM/log analytics platforms, Reco or equivalent SaaS security tools, Qualys or comparable vulnerability management platforms
Required experience securing and monitoring Okta, Microsoft 365, and Google Workspace
Practical experience securing datacenters, AWS, and Azure environments
Experience participating in on‑call rotations for security escalations
Strong understanding of incident response, logging, and risk‑based vulnerability remediation
Strong written and verbal communication skills for technical and non‑technical audiences.
Benefits
Competitive compensation package
Retirement Savings Matching Program (RRSP)
Partnership with Perkopolis
Discounts
Flexible work hours & location
Paid parental leave options
Employer-paid health & dental premiums
Mental Health $500 in Health Care Spending Account annually
IT Systems Administrator securing cloud, hardware, and network assets for an Alberta resource and environmental services group. Managing cybersecurity, infrastructure, procurement, and end - user support.
Cyber Defender protecting Ontinue’s AI - powered MXDR customers through SOC threat detection and response. Investigating threats across identity, endpoint, network, and cloud environments.
Security Operations Team Lead building Safe Software’s cybersecurity operations for FME, its enterprise data integration platform. Leading incident response, security tooling, compliance, and team growth.
SOC analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Investigating escalated alerts and improving 24×7 security operations.
SOC cybersecurity analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Improving 24×7 detection, investigation, and incident response capabilities.
Senior Security Operations Engineer monitoring incidents and leading forensics for Samsara’s IoT - connected operations platform. Building security automation and supporting insider - threat investigations.
Senior SOC analyst leading threat detection, investigations, and incident response for Financeit, a Canadian point - of - sale financing provider. Building its new SOC’s automation, AI - threat coverage, and operational standards.