Lead Security Engineer

Morningstar Credit Ratings, LLC; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

A financial services company in Toronto is seeking a Lead Security Engineer to enhance their security monitoring and response initiatives. This role involves leading detection efforts, collaborating with the SOC team, and optimizing security automation workflows. The ideal candidate will have extensive experience in security engineering and a collaborative spirit. This position follows a hybrid work model with a focus on teamwork and communication.

Qualifications

• 5+ years of hands-on experience in security engineering, threat detection, and response.
• Strong expertise with SIEM, SOAR, and EDR.
• Proficiency in scripting and automation (Python, PowerShell, Bash, etc.).

Responsibilities

• Lead security detection and response initiatives to mitigate threats.
• Develop and maintain security detections across platforms.
• Collaborate with SOC and IT teams to refine security capabilities.

Skills

Security engineering

Threat detection

Incident response

Automation scripting

Communication

Tools

SIEM

SOAR

EDR

Job description

Overview

We are seeking a Lead Security Engineer to help drive our security detection and response efforts. In this role, you will be responsible for designing, implementing, and improving security monitoring, automation, and response capabilities. You will work closely with security engineers, analysts, and cross-functional teams to strengthen our security posture.

This position is based in our Toronto office. We follow a hybrid policy of 3 days onsite and 2 days remote work.

Key Responsibilities

• Lead security detection and response initiatives, ensuring effective threat monitoring, investigation, and mitigation.
• Develop and maintain security detections across SIEM, SOAR, and EDR platforms.
• Architect and optimize security automation workflows to enhance threat response efficiency.
• Collaborate with our in-house SOC and IT teams to refine detection and preventative capabilities and reduce false positives.
• Research and implement new security technologies and best practices to enhance monitoring and response effectiveness.
• Perform security assessments, tuning detection rules, and developing playbooks for security incidents.
• Mentor junior engineers and contribute to security strategy and roadmap planning.

Requirements

• 5+ years of hands-on experience in security engineering, threat detection, and response.
• Strong expertise with SIEM, SOAR, and EDR.
• Experience developing and tuning detections using logs, telemetry, and threat intelligence.
• Proficiency in scripting and automation (Python, PowerShell, Bash, etc.).
• Strong understanding of attack techniques (MITRE ATT&CK framework) and incident response methodologies.
• Ability to analyze security telemetry, investigate threats, and develop effective mitigation strategies.
• Excellent communication skills and ability to collaborate across teams.

Preferred Qualifications

• Experience with cloud security monitoring (AWS, Azure, GCP).
• Familiarity with security frameworks (NIST, CIS, ISO 27001).
• Certifications such as GIAC (GCDA, GCIH, GCFA), OSCP, CISSP, or relevant credentials.

Note on Application Process and Benefits

If you are passionate about security, automation, and detection engineering, we'd love to hear from you! Apply today to be a part of our growing security team.

Morningstar’s hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. We’ve found that we’re at our best when we’re purposely together on a regular basis, at least three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.

How to Apply

1. When you find a position you’re interested in, click the 'Apply' button. Please fill out this form completely, attaching your resume and cover letter in the approved format. Read the job requirements carefully and make sure to attach writing or design samples as required. Applicants must submit their resume and other information through our corporate website to be considered for a job at Morningstar. No phone calls, please.
2. You will receive an email notification to confirm that we’ve received your application.
3. If you are called in for an interview, a representative from Morningstar will contact you to set up a date, time, and location. Be prepared for a rigorous interview process. To make sure you’re a good fit for Morningstar and we’re a good fit for you, we’ll schedule time for you to meet with multiple staff members at all levels of the company. Expect to return for multiple interviews as part of the process. A representative from Morningstar will contact you with the results of your interview—either with a job offer or to let you know our plans for the position.

Applicants With Disabilities Who Need Accommodation

Morningstar is committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please call [phone] or email [e-mail] and let us know the nature of your request and your contact information.

Legal Notice

Morningstar is strongly committed to creating and preserving equal opportunity for all employees and applicants. We make all employment decisions—including recruitment, hiring, compensation, training, promotion, transfer, discipline, termination, and other personnel matters—without regard to race, color, ancestry, religion, sex, national origin, age, disability, protected veteran status, marital status, sexual orientation, genetic information, citizenship, gender identity and expression, parental status, or other legally protected characteristics or conduct.

US Applicants: Morningstar is an E-Verify program participant.