Senior Security Operations Engineer (GCP)

Location: Toronto, Canada; Toronto-area employees within 65 km of the downtown headquarters collaborate in-office Monday through Thursday

Salary: $130,600–$170,000 CAD annually for Canada applicants

Company

hirify.global is a healthcare experience platform helping health plans and healthcare providers improve how people complete and manage their care.

What you will do

• Monitor security events and alerts across SIEM, EDR, SASE, and related sources.
• Lead incident investigations, containment, eradication, recovery, root-cause analysis, and preventive improvements.
• Develop incident response plans, playbooks, detection rules, and security use cases.
• Build automation and event-enrichment workflows using GCP services such as Cloud Functions, Cloud Run, Pub/Sub, Dataflow, BigQuery, and Cloud Storage.
• Manage security tooling and infrastructure through Terraform, and evaluate security controls and technologies.
• Collaborate with IT, Engineering, Legal, leadership, and junior security staff while supporting compliance reporting and audits.

Requirements

• At least 7 years of cybersecurity experience focused on incident response, or at least 3 years in security operations with hands-on SOAR and automation experience.
• Bachelor’s degree in Computer Science or a related field.
• Experience configuring and administering SIEM and EDR tools and leading incident response processes.
• Proficiency in scripting with Python or Go and experience with Terraform or Ansible.
• Experience with threat intelligence platforms, security monitoring, analysis, and problem-solving.
• Strong communication, collaboration, and mentoring skills; participation in an on-call rotation is required.

Nice to have

• Security certifications such as OffSec or GIAC.
• Experience with digital forensics, cloud security across AWS, Azure, or GCP, SOAR, and network security.
• Contributions to the security community through articles, presentations, or similar work.

Culture & Benefits

• One-year fixed-term position within a security organization focused on security by design.
• AI-native working practices, including responsible use of AI tools for analysis, coding, research, and automation.
• Flexible remote days are available each quarter depending on distance from the Toronto office.
• Equal employment opportunity and assistance throughout the recruitment process.

Hiring process

• A recruiter reviews applications and contacts aligned candidates to discuss goals and the role-specific interview process.
• Before joining, candidates complete reference and background checks; additional checks may apply to US candidates.