Staff Security Operations Specialist (AI)

Location: Remote across Canada, with access to the Montreal office and in-person gatherings twice a year.

Base salary: $125,000–$160,000 annually, adjusted by candidate region within Canada.

Company

hirify.global is a Montreal-based technology company founded in 2006, developing hirify.global Agent and ShareGate, a Microsoft 365 migration and governance product used by more than 15,000 companies worldwide.

What you will do

• Build the end-to-end security operations pipeline, integrating alert sources with agentic triage, enrichment, correlation, investigation drafting, and Jira-based routing.
• Define agent trust boundaries, including autonomous closure, recommendations, human escalation, evaluation, prompt-injection defenses, and permission controls.
• Reduce false positives and misrated findings so that findings reaching people are real and correctly prioritized.
• Own detection engineering as code, map detections to MITRE ATT&CK, and measure false-positive rates across the cloud-native SIEM and XDR environment.
• Lead security incident response from triage through postmortems, with agents gathering evidence, and manage the performance of the managed detection partner.
• Work with developers and product engineering to deliver findings with clear evidence and remediation paths in their workflows.

Requirements

• 7+ years of experience in security operations, incident response, or detection engineering, including recent hands-on work in a cloud SaaS environment.
• Experience validating unclear security findings, tuning false positives at the source, and determining whether issues are real with incomplete evidence.
• Experience working directly with developers to deliver fixes without formal authority while maintaining effective relationships.
• Experience building and shipping agent systems for security work that others depend on, such as MCP servers, Claude skills, subagents, or custom tools, with evaluations that determine when outputs are trusted.
• Understanding of how agentic systems fail and are attacked, including prompt injection, tool-permission scoping, and credential handling.
• Detection engineering experience, including detections as code, fluent use of a SIEM query language, and measurement of false-positive rates.
• Strong understanding of identity and cloud attack paths, ideally involving Azure and Entra ID.

Nice to have

• Experience directing a managed detection partner.
• Threat hunting or digital forensics experience.
• Working proficiency in French.

Culture & Benefits

• Remote work across Canada with access to the Montreal office and twice-yearly in-person gatherings.
• Annual bonus program and long-term incentive program with a share in hirify.global's growth.
• RRSP, family health insurance, telemedicine, and an annual wellness budget.
• Flexible vacation policy.
• Claude access for everyone.
• Fast-moving environment where priorities shift, decisions are made with available information, and AI supports work without replacing judgment.

Hiring process

• Recruiter call followed by a virtual interview with the hiring manager.
• Take-home case study followed by a discussion with future colleagues.
• AI may support certain hiring steps, while final decisions remain human.