Senior Manager leading BDO Canada’s cybersecurity monitoring, threat detection, incident response, and security team. Driving operational risk reduction across enterprise and cloud environments.
About the role
- Spécialiste Staff en opérations de sécurité chez Workleap, éditeur de logiciels de travail et de migration Microsoft 365. Automatisation de la détection, des enquêtes et de la réponse par des agents IA.
Responsibilities
- Build the end-to-end security operations pipeline, including alert integrations, triage, enrichment, correlation, investigation authoring, and routing results to Jira
- Define the agent trust model, including evaluations, safeguards against prompt injection, and permission abuse
- Eliminate false positives and poorly assessed findings from security tools
- Lead detection-as-code engineering aligned with MITRE ATT&CK
- Lead incident response from triage through postmortem
- Oversee the managed detection partner’s performance against measurable criteria
- Deliver security findings into development team workflows with evidence and a remediation path
- Build detection and response agents and demonstrate their reliability
- Collaborate with the Director of Infrastructure and Security, the Staff Application Security Specialist, the Security Tooling team, Infrastructure, ITX, and Product Engineering
Requirements
- English proficiency is required
- 7+ years of experience in security operations, incident response, or detection engineering
- Recent hands-on experience in a cloud-based SaaS environment
- Strong experience validating findings, eliminating false positives, and making decisions based on incomplete evidence
- Experience working directly with development teams and delivering fixes without formal authority
- Experience building and deploying security agent systems, such as MCP servers, Claude Skills, or custom tools
- Experience with evaluations that determine the reliability of agent outputs
- Understanding of failures and attacks affecting agentic systems, including prompt injection and permission and credential management
- Proficiency in detection-as-code engineering and a SIEM query language
- Strong understanding of identity- and cloud-based attack paths, ideally in Azure and Entra ID
- Experience leading a managed detection partner, threat hunting, or forensics experience is an asset
- French proficiency is an asset
Benefits
- Annual bonus program
- LTIP, offering participation in Workleap’s long-term growth
- RRSP
- Family group insurance
- Telemedicine
- Annual wellness budget
- Flexible vacation policy
- Remote work, with access to the Montreal offices
- In-person gatherings twice a year
- Claude available to everyone
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Manager leading BDO Canada's security operations, threat detection, and incident response. Managing cyber risk, security capabilities, and a high - performing cybersecurity team.
Senior security leader directing global investigations and incident response for Affirm’s transparent fintech payment platform. Building scalable response, AI - enabled workflows, and executive risk reporting.
Senior security leader directing Affirm’s global incident response and investigations. Building scalable detection, readiness, and AI - enabled security capabilities for fintech payments.
SOC Detection & Response Specialist developing SIEM detections, SOAR playbooks, and incident - response workflows. Supporting Sopra Steria’s consulting, digital services, and software - development clients.
Staff Security Operations Specialist building AI - powered threat detection and response for ShareGate, a Microsoft 365 migration and governance platform. Automating triage, investigations and developer remediation workflows.
Staff Security Operations Specialist automating threat detection and incident response across Workleap and ShareGate. Building trusted security agents and detection pipelines for a workplace software company.
Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.
Junior SOC Analyst monitoring and responding to security incidents for Long View, a North American IT services provider. Supporting SIEM operations, cloud security, incident escalation, and 24x7 coverage.
Tier 1 Security Consultant monitoring and investigating cyber threats for TELUS’s national cybersecurity operations. Handling SOC alerts, incident response, escalations, and security reporting.