Lead, Threat Detection and Response

ITjobs.ca; Vancouver; On-site; CAD 117,000 - 144,000; Full time

Job summary

An established industry player is seeking a Lead in Threat Detection and Response to enhance their cybersecurity capabilities. This role involves developing automated detection rules, leading security teams, and integrating advanced security tools. With a strong emphasis on collaboration and inclusivity, this position offers a dynamic career path in a supportive environment. The successful candidate will play a crucial role in safeguarding the organization while enjoying a comprehensive benefits package and opportunities for personal and professional growth. Join a company that values diversity and is committed to sustainability.

Benefits

Annual Performance Bonus

Profit Share Plan

Health Spending Account

Personal Spending Account

Extended Health Care

Dental and Vision Care

Employer Paid Pension Plan

Life Insurance and Disability Coverage

Paid Sick Leave, Vacation and Holidays

Virtual Telemedicine

Qualifications

• 10+ years of experience in cybersecurity with a focus on threat detection.
• Proven track record in managing security operations and leading teams.
• Strong coding skills in Python and familiarity with detection rule languages.

Responsibilities

• Develop and implement automated detection rules in SIEM and security tools.
• Integrate detection and incident response tools for seamless threat identification.
• Provide leadership and mentorship to the team on operations and initiatives.

Skills

Cybersecurity

Threat Detection

Incident Response

Automation

Python

YARA

Sigma

Security Operations

Risk Management

Leadership

Education

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM)

Additional Relevant Certifications (e.g., CEH, GIAC, GCIH)

Tools

SIEM Platforms

SOAR Platforms

Security Automation Tools

Job description

Join to apply for the Lead, Threat Detection and Response role at ITjobs.ca

Get AI-powered advice on this job and more exclusive features.

Position Status: Vacant

Teck is a leading Canadian resource company focused on responsibly providing the metals essential for global development and the energy transition while caring for the people, communities and land that we love.

Responsibilities

• Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures
• Champion the 3 lines of defense model for risk management and act as a 2nd line of defense facilitator regularly interacting with the 1st line of defense
• Develop and implement automated detection rules and processes in SIEM and other security tools
• Write and maintain detection scripts and rule sets in code (e.g., using Python, YARA, Sigma)
• Build and maintain automated incident response playbooks and workflows using SOAR platforms
• Integrate detection and incident response tools with other security platforms to enable seamless, automated threat identification and response
• Conduct regular testing and validation of automated detection and response processes
• Collaborate with the threat intelligence team to ensure detection and response rules are informed by the latest threat intelligence
• Apply machine learning and artificial intelligence to improve detection and response capabilities
• Provide leadership, mentorship, and support to the team on day-to-day operations and critical initiatives

Qualifications

• 10+ years of experience in cybersecurity, with a focus on threat detection and incident response
• Proven track record in managing and automating security operations and leading security teams
• Experience in designing and implementing automated detection and response strategies
• Experience in leading third-party security service providers
• Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM) or equivalent
• Additional relevant certifications (e.g., CEH, GIAC, GCIH) are a plus
• Demonstrated Teck values by being responsible and courageous, respectful and inclusive, and humble and driven
• An awareness of and ability to increase maturity by building on context, handle risk by assessing trade-offs, standardize process, and to keep Teck safe by anticipating needs
• Solid understanding of security operations, including threat intelligence, threat detection, incident response, and offensive security
• Proficiency in multiple security incident and event management (SIEM) platforms
• Expertise in security orchestration and automated response (SOAR) platforms
• Strong coding and scripting skills in Python, PowerShell, or similar languages
• Experience with detection rule languages and frameworks (e.g., YARA, Sigma)
• Knowledge of security automation tools and platforms (e.g., SOAR, XDR)
• Understanding of APIs and integration techniques for security tools
• Demonstrated personal accountability, transparency and an overall growth mentality

Why Join Us?

At Teck, we offer more than just a job – we provide a pathway to personal and professional enrichment. With captivating projects set against stunning backdrops, a culture of inclusivity and collaboration, and boundless opportunities to learn and grow, joining us means embracing a fulfilling and dynamic career adventure.

Benefits

Teck employees receive access to our total rewards program and comprehensive benefits package that promote physical, mental, financial, and emotional well-being. This includes but is not limited to:

• Annual Performance Bonus
• Profit Share Plan
• Health Spending Account
• Personal Spending Account
• Extended Health Care
• Dental and Vision Care
• Employer Paid Pension Plan
• Life Insurance and Disability Coverage
• Paid Sick Leave, Vacation and Holidays
• Virtual Telemedicine and additional support for overall well-being
• Employee and Family Assistance Program (EFAP)

Salary Range: $117,000 - $144,000

The actual base salary offered is determined based on the successful candidate’s relevant experience, skills, and competencies and considers internal equity.

About Teck

At Teck, we value diversity. Our teams work collaboratively and respect each person’s unique perspective and contribution.

Teck is one of Canada's leading mining companies, focused on providing products that are essential to building a better quality of life for people around the globe. Our commitment to our people is why Teck has been named one of Canada’s Top 100 Employers for seven consecutive years, listed as one of Canada's Top Employers for Young People and named to the 2024 Bloomberg Gender-Equality Index. The pursuit of sustainability guides Teck's approach to business and we are proud to be recognized as one of the 2024 Global 100 Most Sustainable Corporations by Corporate Knights. Headquartered in Vancouver, Canada, its shares are listed on the Toronto Stock Exchange under the symbols TECK.A and TECK.B and the New York Stock Exchange under the symbol TECK.

Learn more about Teck at www.teck.com or follow @TeckResources.

We wish to thank all applicants for their interest and effort in applying for the position; however, only candidates selected for interviews will be contacted.