Security Incident Response Developer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Cultivate relationships with Engineering teams to enhance incident response capabilities.

• Develop new playbooks and automate manual steps in incident response.

• Lead investigations from triage through evidence collection, analysis, containment, and documentation.

• Serve as the Incident Commander for incidents of low to medium severity.

• Provide support to senior responders during high-severity incidents.

• Transform recurring incident types into systematic workflows from design to tooling and resolution.

• Report on incident trends and metrics to guide team priorities.

• Collaborate with Security Engineers to monitor, refine, and expand SIEM and SOAR platforms.

• Investigate potentially fraudulent and sensitive activities alongside HR, Fraud, and Privacy teams, including insider threats and snooping.

• Engage in an on-call rotation for security incidents, internal inquiries, and operational assistance.

• Create high-fidelity detection rules in conjunction with detection engineering, informed by incident trends and threat intelligence.

• Report directly to the Manager of Detection & Response.

⛳️ Requirements

• Over 3 years of experience in the field of cybersecurity.

• 1–2+ years of hands-on experience in incident response, managing investigations from start to finish.

• Ability to coordinate responders and stakeholders during incidents and recognize when to escalate issues.

• Experience utilizing a SIEM to filter out noise and derive actionable insights, including writing queries and tuning alerts.

• Proficiency with AI coding tools like Claude Code, Cursor, and ChatGPT for building and maintaining automation.

• A workflow-oriented mindset for deconstructing recurring problems into manageable steps for tooling or AI solutions.

• Familiarity with cloud infrastructure such as AWS, GCP, or Azure, and the investigative processes within these environments.

• Discretion and sound judgment in handling sensitive information, including HR matters and insider threats.

• Clear, honest, and inclusive communication with both internal and external stakeholders.

• Good judgment under pressure, particularly in technical problem-solving and cross-team collaboration.

• A strong desire to learn from team members and others.

• Legal eligibility to work in Canada.

🏝️ Benefits

• Comprehensive health benefits and life insurance.

• Long-term group savings plan with employer matching, offered through Wealthsimple for Business.

• 20 vacation days.

• 4 wellness days.

• Unlimited sick and mental health days per year (certain roles may be excluded).

• Opportunity to work outside Canada for up to 90 days annually (90 days away program; certain roles may be excluded).

• Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS.

• Equity compensation for permanent employees.

• AI-assisted interview recording and transcription, with an opt-out option available that does not affect candidacy.