Senior Manager leading BDO Canada’s cybersecurity monitoring, threat detection, incident response, and security team. Driving operational risk reduction across enterprise and cloud environments.
About the role
- SOC Detection & Response Specialist developing SIEM detections, SOAR playbooks, and incident-response workflows. Supporting Sopra Steria’s consulting, digital services, and software-development clients.
Responsibilities
- Develop, test, and fine-tune detection rules for SIEM and security monitoring platforms, including Microsoft Sentinel and Palo Alto
- Create and document security use cases to detect cyber threats based on MITRE ATT&CK techniques
- Design and implement incident investigation and response processes
- Build automation playbooks using SOAR tools to improve incident response efficiency
- Collaborate with SOC analysts to refine alert tuning and reduce false positives
- Perform threat modeling and intelligence-driven detection to proactively identify threats
- Work with customers and internal teams to define SOC workflows and escalation procedures
- Evaluate log sources and data ingestion strategies to enhance security visibility
- Stay up to date with the latest threats, vulnerabilities, and attack techniques
- Provide guidance on log source onboarding, parsing, and correlation for improved detection coverage
Requirements
- 3+ years of hands-on experience in a SOC, Threat Detection, or Incident Response role
- Expertise in SIEM platforms (e.g., Microsoft Sentinel, Splunk, QRadar, Elastic Security)
- Experience writing custom detection rules using KQL, SPL, Sigma, or other query languages
- Strong knowledge of cyber threat detection, attack techniques (MITRE ATT&CK), and security event analysis
- Experience with SOAR platforms (e.g., Microsoft Sentinel Playbooks, Palo Alto XSOAR, Splunk SOAR) for automation
- Familiarity with log sources (firewalls, EDR, IAM, cloud logs, etc.) and how to build detections based on them
- Knowledge of incident response frameworks (NIST, SANS, etc.) and how to structure response processes
- Bachelor's degree in Information Technology or a related field (or equivalent experience)
- English required
- Excellent interpersonal, communication, and listening skills
- Scripting skills (Python, PowerShell, Bash) are a plus
- Certifications such as Microsoft Security, Palo Alto XSIAM, or equivalent certifications are a plus
Benefits
- Comprehensive group benefits plan: life insurance, long-term disability, healthcare, dental, vision, and a health spending account to promote health and wellness (Sopra Steria covers 100% of premiums)
- Paid statutory holidays, sick days, personal days, as well as 3 weeks of vacation
- Monthly transportation allowance
- Hybrid work environment
- Company equipment to help you work efficiently
- A friendly, collaborative, and inclusive culture
- Phenomenal career progression opportunities
- Excellent training and development opportunities
- Encouragement to develop your skills in a supportive and friendly environment
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Manager leading BDO Canada's security operations, threat detection, and incident response. Managing cyber risk, security capabilities, and a high - performing cybersecurity team.
Senior security leader directing global investigations and incident response for Affirm’s transparent fintech payment platform. Building scalable response, AI - enabled workflows, and executive risk reporting.
Senior security leader directing Affirm’s global incident response and investigations. Building scalable detection, readiness, and AI - enabled security capabilities for fintech payments.
Staff Security Operations Specialist building AI - powered threat detection and response for ShareGate, a Microsoft 365 migration and governance platform. Automating triage, investigations and developer remediation workflows.
Staff Security Operations Specialist automating threat detection and incident response across Workleap and ShareGate. Building trusted security agents and detection pipelines for a workplace software company.
Spécialiste Staff en opérations de sécurité chez Workleap, éditeur de logiciels de travail et de migration Microsoft 365. Automatisation de la détection, des enquêtes et de la réponse par des agents IA.
Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.
Junior SOC Analyst monitoring and responding to security incidents for Long View, a North American IT services provider. Supporting SIEM operations, cloud security, incident escalation, and 24x7 coverage.
Tier 1 Security Consultant monitoring and investigating cyber threats for TELUS’s national cybersecurity operations. Handling SOC alerts, incident response, escalations, and security reporting.