Remote Cyber Defense Engineer - AI-Driven SOC

BeyondTrust, Inc.; Canada; Remote; CAD 110,000 - 170,000; Full time

Job summary

BeyondTrust is seeking a Cyber Defense Engineer to defend both corporate infrastructure and customer-facing products. You will monitor, investigate, and respond to security events in a fast-paced environment, partnering with threat hunters and analysts to improve detection and response.

You will work on AI-driven triage and automation, contribute to playbooks, and help evolve detection capabilities across SIEM/EDR, aligned with MITRE ATT&CK and industry best practices.

Qualifications

• Minimum 4+ years in SOC, security operations or IR.
• Knowledge of MITRE ATT&CK, network protocols and endpoint behavior.
• Experience with at least one SIEM and writing detection queries.
• Familiarity with EDR and cloud environments; comfort with AI-assisted tools.

Responsibilities

• Monitor and triage security alerts across SIEM, EDR, CSPM.
• Lead or participate in IR engagements from detection to remediation.
• Develop detection content and tune rules to reduce false positives.
• Translate threat intel into actionable detections; support MITRE mapping.

Skills

SOC experience

Incident response

MITRE ATT&CK

SIEM queries

EDR familiarity

AI/automation tools

Clear written comms

Threat hunting

Tools

SIEM platform

EDR platforms

SOAR platforms

Cloud environments (IaaS)

Job description

BeyondTrust is seeking a Cyber Defense Engineer to defend both corporate infrastructure and customer-facing products. You will monitor, investigate, and respond to security events in a fast-paced environment, partnering with threat hunters and analysts to improve detection and response.

You will work on AI-driven triage and automation, contribute to playbooks, and help evolve detection capabilities across SIEM/EDR, aligned with MITRE ATT&CK and industry best practices.