Product Security Detection Engineer
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Product Security Detection Engineer: Designing and operationalizing a comprehensive detection engineering framework for high-speed connectivity products with an accent on telemetry standards, SIEM integration, and TTP-based detection content. Focus on bridging offensive security insights with product development to enhance observability and compliance posture.
Location: Ottawa, Canada (with US-based compensation also listed)
Salary: C$76,600 - C$122,400 (Canada) / $101,600 - $162,400 (USA)
Company
is a global leader in high-speed connectivity, prioritizing a people-first culture that empowers individual growth and societal impact.
What you will do
- Lead the design and implementation of the detection engineering framework, including logging, auditing, and alerting.
- Define telemetry standards for product teams to ensure consistent, SIEM-ready event data.
- Translate findings from pen testing, PSIRT, and threat intelligence into actionable, product-specific detections.
- Architect and maintain custom detection scripts and automation tools.
- Develop metrics and dashboards to track MTTD, detection precision, and compliance coverage.
- Partner with R&D and compliance teams to embed security checkpoints into the product lifecycle.
Requirements
- 8+ years of experience in security engineering, detection engineering, or product security.
- Strong understanding of logging architectures, telemetry design, and SIEM technologies like Splunk, QRadar, Elastic, or Sentinel.
- Hands-on experience with threat detection logic, MITRE ATT&CK mapping, and detection-as-code principles.
- Proficiency in Python, JSON, and scripting for automation.
- Familiarity with regulatory frameworks such as NIST 800-53, ISO 27001, and CIS Benchmarks.
- Excellent communication skills for interfacing with product managers and executive stakeholders.
Nice to have
- Experience maturing detection or telemetry programs in networking or telecom environments.
- Familiarity with secure configuration baselines and SBOM/VEX workflows.
- Contributions to open-source detection or security tooling.
Culture & Benefits
- Comprehensive benefits package including medical, dental, and vision plans.
- Participation in 401(K) (USA) and DCPP (Canada) with company matching.
- Employee Stock Purchase Program (ESPP) and Employee Assistance Program (EAP).
- Commitment to a flexible work environment and individual well-being.
- Paid holidays, sick leave, and vacation time.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →