1 день назад
Staff Security Engineer, AI-Driven Detection & Response (AI)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Staff Security Engineer, AI-Driven Detection & Response (AI): Building and scaling defensive detection, incident response, and AI-assisted SecOps capabilities across cloud infrastructure, identity, endpoints, applications, and AI/ML pipelines with an accent on high-precision detection, automated investigation, and AI threat coverage. Focus on designing agent-assisted workflows, threat modeling prompt injection and tool misuse, conducting defensive validation, and leading complex incident investigations.
Location: Remote, based in Canada; listed locations include Ottawa, Calgary, and Toronto
Company
helps people get better through its catalog of health-related products and services.
What you will do
- Set the technical direction for detection engineering, incident response, and defensive security across Security, Platform, and Engineering.
- Architect and maintain detection logic across SIEM, cloud infrastructure, identity systems, endpoints, and AI/ML pipelines.
- Design AI-assisted investigation workflows using LLMs and automated agents for triage, enrichment, correlation, and containment.
- Lead security investigations, improve response playbooks, mentor Security Operations members, and participate in an on-call rotation.
- Threat model AI agents and services, lead defensive testing and purple-team exercises, and validate detection resilience against AI-driven threats.
- Operationalize threat intelligence, coordinate IOC blocking, and improve telemetry, authorization, and access-control practices.
Requirements
- Must be based in Canada, with remote work listed for Ottawa, Calgary, or Toronto.
- 8+ years of experience in detection engineering, incident response, or security engineering, including organizational security leadership.
- Experience incorporating AI tooling into SecOps workflows and detecting AI-specific threat vectors.
- Strong scripting and automation skills with Python, JavaScript, or similar, plus experience with SOAR or workflow automation platforms.
- Experience with security controls as code, such as Terraform, cloud security with AWS, and modern SaaS and identity environments.
- Hands-on incident response, MITRE ATT&CK, detection tuning, telemetry design, and communication with technical and non-technical stakeholders.
Nice to have
- Experience with Sigma rules or other open detection content.
- Experience with red-team or purple-team exercises.
- Experience in healthcare, regulated, or highly sensitive-data environments.
- GCIH, GCFA, GCTI, GCDA, or equivalent practical experience.
Culture & Benefits
- Remote work with the ability to work wherever you work well.
- Generous paid time off and competitive pay.
- RRSP matching, flexible benefits, and a workplace wellness program.
- Training budget and company-wide learning initiatives.
- Discount on the product catalog.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
1 день назад
Senior or Lead Security Engineer (Detection & Response)
Anthropic
22 часа назад
Senior/Staff Security Engineer, Detection & Response (AI)
2 дня назад
Security Engineer, Detection & Response (AI)
Datadog
1 день назад
Senior Security Engineer, Security Incident Response Team (Cybersecurity)
192 000 - 240 000$
7 дней назад
Security Operations Engineer (AI)
91 200 - 118 600$
3 дня назад
Senior Incident Response Analyst (AI)
282 600 - 368 950PLN