SecOps Engineer

This is a fully remote position, open to applicants in Canada, +1 more state.

📋 Description

• Serve as the primary technical lead for internal third-party security assessments and external vulnerability evaluations.

• Oversee vendor coordination, manage project timelines, and monitor remediation efforts.

• Design, implement, and oversee the Security Information and Event Management (SIEM) capabilities.

• Create log analysis pipelines for environmental logs and system telemetry data.

• Utilize AI technologies and automation frameworks to enhance incident detection, minimize false positives, and automate routine processes.

• Establish a proactive threat intelligence review process and relay emerging trends to the Enterprise IT (EIT) team.

• Provide actionable threat intelligence recommendations to various teams throughout the organization.

• Ensure the secure setup, configuration, and baseline hardening of infrastructure, applications, and corporate systems.

• Create documentation and runbooks for transitioning hardened systems to the Support team.

• Oversee systems engineering, application onboarding, and lifecycle management within EIT.

• Collaborate with IT Support on handover workflows, threat intelligence, and incident response protocols.

• Assess security-related findings and requests escalated to the DevOps team.

• Resolve SecOps-related issues and only escalate relevant items to DevOps.

• Develop operational workflows that facilitate proactive security operations.

• Implement SIEM tools and logging standards to enhance detection speed.

• Provide documentation and training resources to the Support team.

• Carry out compliance and security initiatives.

• Decrease the quantity and unpredictability of security-related DevOps tickets.

⛳️ Requirements

• 6–8 years of experience in Systems Administration, Systems Engineering, or IT Operations.

• Demonstrated success in transitioning career focus towards security operations.

• Proven expertise in configuring SIEM platforms.

• Experience in managing log aggregation processes.

• Proficient in developing effective alerting logic.

• Practical experience with automation scripts, tools, or AI-driven capabilities in security operations.

• In-depth technical knowledge of securing cloud environments, network configurations, identity providers (IdP), and enterprise SaaS ecosystems.

• Proven ability to lead cross-functional technical initiatives.

• Experience collaborating with external third-party security vendors.

• Capability to convert vulnerability data into actionable remediation strategies.

• Exceptional skill in creating clear runbooks from intricate system architectures.

• Strong communication skills to convey technical threat intelligence updates to non-technical teams.

• Security-oriented certifications such as Security+, CEH, or GISF are highly regarded.

• Cloud or Systems certifications, such as AWS or Google certifications, are also highly valued.

🏝️ Benefits

• A mission-driven company culture.

• Fully remote work environment.

• Competitive salary and benefits package.

• Fully covered employee premiums for Medical, Dental, and Vision plans.

• 401k Program.

• Monthly stipends for Education, Well-being, and Work From Home expenses.

• Non-accrual Paid Time Off (PTO).

• Opportunities for professional growth.

• Company retreats.

• Medical and Family/Parental Leave.