Security Engineer – SOC

This is a fully remote position, open to applicants in Canada.

📋 Description

• Develop, test, and refine detection rules for SIEM and security monitoring platforms, including Microsoft Sentinel and Palo Alto.

• Create and document security use cases to identify cyber threats based on MITRE ATT&CK techniques.

• Design and implement processes for incident investigation and response.

• Construct automation playbooks utilizing SOAR tools to enhance incident response efficiency.

• Collaborate with SOC analysts to optimize alert tuning and decrease false positives.

• Conduct threat modeling and intelligence-driven detection to proactively uncover threats.

• Work with customers and internal teams to establish SOC workflows and escalation procedures.

• Assess log sources and data ingestion strategies to improve security visibility.

• Stay informed about the latest threats, vulnerabilities, and attack techniques.

• Provide guidance on log source onboarding, parsing, and correlation to enhance detection coverage.

⛳️ Requirements

• A minimum of 3 years of hands-on experience in a SOC, Threat Detection, or Incident Response role.

• Proficiency in SIEM platforms (e.g., Microsoft Sentinel, Splunk, QRadar, Elastic Security).

• Experience in writing custom detection rules using KQL, SPL, Sigma, or other query languages.

• Strong understanding of cyber threat detection, attack techniques (MITRE ATT&CK), and security event analysis.

• Familiarity with SOAR platforms (e.g., Microsoft Sentinel Playbooks, Palo Alto XSOAR, Splunk SOAR) for automation.

• Knowledge of log sources (firewalls, EDR, IAM, cloud logs, etc.) and how to create detections based on them.

• Understanding of incident response frameworks (NIST, SANS, etc.) and how to structure response processes.

• Bachelor's degree in Information Technology or a related field (or equivalent experience).

• Proficiency in English is required.

• Excellent interpersonal, communication, and listening skills.

• Scripting skills (Python, PowerShell, Bash) are considered an asset.

• Certifications such as Microsoft Security, Palo Alto XSIAM, or equivalent certifications are advantageous.

🏝️ Benefits

• Comprehensive group benefits plan: life insurance, long-term disability, healthcare, dental, vision, and a health spending account to promote health and wellness (Sopra Steria covers 100% of premiums).

• Paid statutory holidays, sick days, personal days, as well as 3 weeks of vacation.

• Monthly transportation allowance.

• Hybrid work environment.

• Company equipment provided to ensure efficient work.

• A friendly, collaborative, and inclusive culture.

• Exceptional career progression opportunities.

• Excellent training and development opportunities.

• Encouragement to develop your skills in a supportive and friendly environment.