Senior Manager leading BDO Canada’s cybersecurity monitoring, threat detection, incident response, and security team. Driving operational risk reduction across enterprise and cloud environments.
About the role
- Staff Security Operations Specialist building AI-powered threat detection and response for ShareGate, a Microsoft 365 migration and governance platform. Automating triage, investigations and developer remediation workflows.
Responsibilities
- Own how Workleap and ShareGate detect, investigate and respond to threats
- Build the end-to-end security operations pipeline, including source-tool integrations, agentic triage, enrichment, correlation and investigation drafting
- Connect security findings to Jira with evidence and a remediation path
- Define the trust model for security agents and determine which actions require human judgment
- Use evaluations to secure agents against prompt injection and permission abuse
- Reduce false positives and correctly prioritize security findings
- Own detection engineering as code mapped to MITRE ATT&CK
- Lead security incident response from triage through postmortem
- Hold the managed detection partner to a measurable standard
- Deliver security findings to developers with clear evidence and remediation paths
- Report to the Director of Infrastructure and Security and collaborate with application security, security tooling, infrastructure, ITX and product engineering teams
- Work on LeapSec's security operations strategy, including embedding security in product squads and automating SOC 2 evidence collection
Requirements
- 7+ years in security operations, incident response or detection engineering, with recent hands-on time in a cloud SaaS environment
- Deep experience validating tooling findings, tuning false positives, and deciding with incomplete evidence whether something is real
- Years of working directly with developers and getting fixes shipped without authority
- Built and shipped agent systems for security work, such as MCP servers, Claude skills, subagents or custom tools, with evaluations that determine when output is trusted
- Working model of agentic-system failures and attacks, including prompt injection, tool permission scoping and credential handling
- Detection engineering experience, including detections as code, fluent SIEM query-language use, and measuring false-positive rates
- Strong grasp of identity and cloud attack paths, ideally in Azure and Entra ID
- Bonus: experience directing a managed detection partner, threat hunting or forensics, and working proficiency in French
Benefits
- Annual bonus program
- LTIP program, share in Workleap's long-term growth
- RRSP
- Family health insurance
- Telemedicine
- Annual wellness budget
- Flexible vacation policy
- Remote work, with access to the Montreal office
- In-person gatherings twice a year
- Claude access, for everyone
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Manager leading BDO Canada's security operations, threat detection, and incident response. Managing cyber risk, security capabilities, and a high - performing cybersecurity team.
Senior security leader directing global investigations and incident response for Affirm’s transparent fintech payment platform. Building scalable response, AI - enabled workflows, and executive risk reporting.
Senior security leader directing Affirm’s global incident response and investigations. Building scalable detection, readiness, and AI - enabled security capabilities for fintech payments.
SOC Detection & Response Specialist developing SIEM detections, SOAR playbooks, and incident - response workflows. Supporting Sopra Steria’s consulting, digital services, and software - development clients.
Staff Security Operations Specialist automating threat detection and incident response across Workleap and ShareGate. Building trusted security agents and detection pipelines for a workplace software company.
Spécialiste Staff en opérations de sécurité chez Workleap, éditeur de logiciels de travail et de migration Microsoft 365. Automatisation de la détection, des enquêtes et de la réponse par des agents IA.
Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.
Junior SOC Analyst monitoring and responding to security incidents for Long View, a North American IT services provider. Supporting SIEM operations, cloud security, incident escalation, and 24x7 coverage.
Tier 1 Security Consultant monitoring and investigating cyber threats for TELUS’s national cybersecurity operations. Handling SOC alerts, incident response, escalations, and security reporting.