Manager, Cybersecurity Detection and Response

TC Energy; Calgary; Hybrid; CAD 100,000 - 130,000; Full time

Job summary

A leading energy infrastructure company in Calgary seeks a Manager for Cybersecurity Detection and Response. This critical role involves leading the Security Operations Center and enhancing the organization’s defense against cyber threats. The candidate should have over 10 years of cybersecurity experience, including 5 in leadership, with expertise in incident response and security operations. A hybrid work model is offered, promoting flexibility in the workplace.

Qualifications

• 10+ years of experience in cybersecurity, at least 5 in a leadership role.
• Experience with SIEM, EDR solutions, and cloud security.
• Strong problem-solving abilities and capacity to work under pressure.

Responsibilities

• Lead a team of security analysts and provide technical guidance.
• Coordinate incident response for cybersecurity incidents.
• Optimize security tools used in operations.

Skills

Leadership in cybersecurity

Incident response coordination

Analytical skills

Communication skills

Education

Bachelor’s degree in computer science, engineering, or cybersecurity

Tools

SIEM platforms

EDR solutions

Threat intelligence tools

Job description

The Opportunity

We are seeking a cybersecurity leader to join our organization as Manager, Cybersecurity Detection and Response. In this critical role, you will lead our Security Operations Center (SOC) and direct our enterprise-wide threat detection and incident response capabilities.

As cyber threats continue to evolve in sophistication and impact, your expertise will be instrumental in protecting our digital assets, infrastructure, and sensitive information. You will lead and improve a team of skilled security analysts, implement advanced detection technologies, and establish response protocols that strengthen our security posture.

The ideal candidate brings a blend of technical expertise, leadership experience, and strategic vision to transform our detection and response function. You will serve as the primary authority for security monitoring and incident management, working closely with other teams to communicate security risks and coordinate response efforts across the organization.

This position offers the opportunity to make a significant impact on our organization's security resilience while advancing your career at the forefront of cybersecurity operations and leadership.

What you’ll do

• Lead and develop a team of security analysts and service providers, providing technical guidance and mentorship
• Lead and coordinate the incident response team in handling cybersecurity incidents, including data breaches, malware infections, insider threats, and other security breaches
• Establish and maintain effective security monitoring capabilities and incident response procedures
• Oversee the implementation and optimization of security tools including SIEM, EDR, and threat intelligence platforms
• Develop metrics and KPIs to measure the effectiveness of detection and response capabilities
• Drive continuous improvement in all aspects of the team
• Coordinate incident response activities during security events, ensuring proper escalation and remediation
• Maintain relationships with key stakeholders across IT, business units, and senior leadership
• Create and maintain documentation for security processes, playbooks, and response procedures
• Stay current with emerging threats, vulnerabilities, and security technologies
• Provide regular reporting on security posture and incident trends to senior leadership
• Participate in tabletop exercises and simulations to test and strengthen incident response capabilities, business continuity plans, and cross-functional coordination
• Provide senior leadership with regular updates on security operations
• Prepare detailed reports on incidents, investigations, and security risks, providing clear and actionable recommendations for improvements
• Effectively communicate threat information and system status to leadership and stakeholders
• Provide guidance and mentorship to members of the Defense and Response team

Minimum Qualifications

• Bachelor’s degree in computer science, engineering, cybersecurity, or related field
• 10+ years of experience in cybersecurity with at least 5 years in a leadership role. Leadership in an alternate technology role will be considered
• Experience with SIEM platforms, EDR solutions, security orchestration tools, vulnerability management, threat intelligence and cloud security concepts
• Deep understanding of security operations, incident response, and threat hunting
• Experience overseeing managed service providers
• Strong analytical, investigative, problem-solving, communications skills and the ability to work under pressure are important for success in this role
• Excellent communication and leadership abilities, enabling you to collaborate effectively with diverse teams and guide them through incident response processes
• Strong interpersonal skills, professional demeanor and demonstrated ability to work cross functionally with stakeholders at multiple levels
• Energetic individual who is passionate about continuous improvement and outcomes focused with the ability to learn and adapt quickly to changing environments and priorities

Preferred Qualifications

• Familiarity with one or more of the following Security Architecture standards: NIST CSF, NIST 800-53, CSA Z246.1, TSA Security Directives, CIS CSC, ISA/IEC 62443
• Industry recognized certifications such as CISSP, GCIP, GICSP, CSSA or other industry recognized cybersecurity certification
• Knowledge of, or hands-on experience with operational technology in the energy industry or equivalent

To remain competitive, support our high-performance culture and allow for more flexibility in the way we work, we offer a hybrid work model and flexible dress code for our eligible office-based workforce in Canada, the U.S. and Mexico. #LI-Hybrid

About our business

TC Energy is a leading energy infrastructure company in North America. We have complementary businesses of natural gas pipelines and power generation. Our operations span three countries, seven Canadian provinces, and 34 U.S. states.

TC Energy is an equal opportunity employer.

Learn more

Visit us at TCEnergy.com and connect with us on our social media channels for our latest news, employee stories, community activities, and other updates.

Thank you for choosing TC Energy in your career search.

* Depending on qualifications, the successful candidate may be offered a position at a more appropriate level and/or ladder.

* Applicants must have legal authorization to work in the country in which the position is based with no restrictions.

* All positions require background screening. Some require criminal and/or credit checks to comply with regulations.

* TC Energy is committed to provide employment opportunities to all qualified individuals, without regard to race, religion, age, sex, color, national origin, sexual orientation, gender identity, veteran status, or disability. Accommodation for applicants with disabilities is available on request during the recruitment process. Applicants with disabilities can request accessible formats or communication supports by contacting [e-mail].