Lead Service Manager (SOAR)

Location: Waterloo, Ontario, Canada

Salary: CAD 86,800–130,200 per year

Company

hirify.global is a global information management and cybersecurity company developing secure technologies for digital transformation and managed security services.

What you will do

• Identify and prioritize repetitive SOC tasks for automation, including alert triage, enrichment, case creation, notification, and containment.
• Design, build, test, and maintain SOAR playbooks and integrations across SIEM, EDR, threat intelligence, case management, identity, and collaboration platforms.
• Implement practical AI and LLM use cases for alert summarization, enrichment, triage assistance, and analyst- and client-facing content.
• Integrate security tooling through APIs, webhooks, and structured data while building maintainable connectors.
• Establish standards, version control, testing, documentation, human oversight, and operational guardrails for automation and agentic AI.
• Measure automation impact through triage and response times, analyst hours saved, false-positive reduction, and playbook coverage.

Requirements

• 5+ years of security engineering, SecDevOps, and automation experience delivering production-grade security solutions.
• Hands-on experience building and managing SOAR playbooks, integrations, and automated response workflows.
• Strong Python skills with REST APIs, JSON, webhooks, data transformation, and automation frameworks.
• Deep understanding of SOC operations, alert lifecycle management, triage, enrichment, containment, and response.
• Experience with SIEM, EDR, identity, threat intelligence, case management, and collaboration platforms, plus Docker, Kubernetes, Git, testing, and documentation.
• Experience applying AI, LLMs, and agentic AI frameworks to security workflows, including prompt engineering, guardrails, evaluation, and operational safety.

Nice to have

• Experience supporting Azure, AWS, and GCP in multi-tenant managed services or MDR environments.
• Familiarity with Devo, Microsoft Sentinel, Splunk, QRadar, FortiSOAR, SplunkSOAR, Cortex XSOAR, Swimlane, SentinelOne, or CrowdStrike.
• GIAC GPYC or other cloud and security automation certifications.

Culture & Benefits

• Collaboration-focused environment built around trust, ethical conduct, resilience, and continuous innovation.
• Benefits package supporting physical, emotional, and financial wellbeing.
• Vacation entitlement and paid time off.
• Variable and commission compensation opportunities may be available for eligible roles.
• Commitment to diversity, inclusion, accessibility, and reasonable accommodation.