Lead Security Engineer

Morningstar; Toronto; Hybrid; CAD 100,000 - 125,000; Full time

Job summary

An innovative firm is looking for a Lead Security Engineer to enhance its security detection and response efforts. In this pivotal role, you will design and implement security monitoring solutions, collaborate with cross-functional teams, and mentor junior engineers. Your expertise in security engineering and automation will be crucial in developing effective threat responses. This position offers a hybrid work environment, allowing you to balance onsite collaboration with remote flexibility. If you are passionate about security and eager to make a significant impact, this opportunity is perfect for you.

Qualifications

• 5+ years in security engineering with a focus on detection and response.
• Strong experience with automation and scripting for security tasks.

Responsibilities

• Lead security initiatives for threat monitoring and response.
• Develop and optimize security detections across various platforms.

Skills

Security Engineering

Threat Detection

Incident Response

Communication Skills

Automation Scripting

Education

Bachelor's Degree in Computer Science or related field

Tools

SIEM

SOAR

EDR

AWS

Azure

GCP

Job description

About the role:

We are seeking a Lead Security Engineer to help drive our security detection and response efforts. In this role, you will be responsible for designing, implementing, and improving security monitoring, automation, and response capabilities. You will work closely with security engineers, analysts, and cross-functional teams to strengthen our security posture.

This position is based in our Toronto office. We follow a hybrid policy of 3 days onsite and 2 days remote work.

Key Responsibilities

1. Lead security detection and response initiatives, ensuring effective threat monitoring, investigation, and mitigation.
2. Develop and maintain security detections across SIEM, SOAR, and EDR platforms.
3. Architect and optimize security automation workflows to enhance threat response efficiency.
4. Collaborate with our in-house SOC and IT teams to refine detection and preventative capabilities and reduce false positives.
5. Research and implement new security technologies and best practices to enhance monitoring and response effectiveness.
6. Perform security assessments, tuning detection rules, and developing playbooks for security incidents.
7. Mentor junior engineers and contribute to security strategy and roadmap planning.

Requirements

1. 5+ years of hands-on experience in security engineering, threat detection, and response.
2. Strong expertise with SIEM, SOAR, and EDR.
3. Experience developing and tuning detections using logs, telemetry, and threat intelligence.
4. Proficiency in scripting and automation (Python, PowerShell, Bash, etc.).
5. Strong understanding of attack techniques (MITRE ATT&CK framework) and incident response methodologies.
6. Ability to analyze security telemetry, investigate threats, and develop effective mitigation strategies.
7. Excellent communication skills and ability to collaborate across teams.

Preferred Qualifications

1. Experience with cloud security monitoring (AWS, Azure, GCP).
2. Familiarity with security frameworks (NIST, CIS, ISO 27001).
3. Certifications such as GIAC (GCDA, GCIH, GCFA), OSCP, CISSP, or relevant credentials.

If you are passionate about security, automation, and detection engineering, we'd love to hear from you! Apply today to be a part of our growing security team.