SecOps Engineer

Cognibox; Montreal; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid workplace policy

Mental health & wellbeing support

Vacation 3 weeks

Wellness days

Medical coverage

Job summary

Cognibox in the Greater Montreal area seeks a SecOps Engineer to monitor, investigate, and respond to cybersecurity threats across cloud, endpoints, identities, and apps. You will evolve security monitoring, vulnerability management, and incident response while aligning with governance and compliance needs.

Join a collaborative team delivering secure operations in a hybrid environment and supporting ISO 27001, GDPR, and other standards.

Qualifications

• Hands-on experience triaging, investigating, and responding to security alerts or incidents.
• Proficiency with Microsoft Entra ID, Defender for Endpoint, and Sentinel.
• Strong understanding of back-office systems and network technologies.
• Experience building/maintaining infrastructure on premises and in cloud.
• Experience with vulnerability management and risk remediation.

Responsibilities

• Monitor and investigate security alerts and incidents.
• Conduct threat hunting using SIEM, EDR, and cloud security platforms.
• Manage vulnerability scanning, assessment, prioritisation, and remediation tracking.
• Develop and maintain security monitoring rules and detection logic.
• Support incident response investigations and forensic activities.
• Administer security platforms such as Defender XDR, Sentinel, Entra ID, and vulnerability tools.
• Review and improve security configurations across cloud and on‑prem systems.
• Assist with ISO 27001, SOC, GDPR and other compliance activities.
• Develop security automation, scripts, and operational procedures.
• Deliver security awareness and guidance to stakeholders.
• Manage disaster recovery plans and coordinate testing.
• Assist infrastructure with firewall and core network management.

Skills

Incident response

Threat hunting

Vulnerability mgmt

Network fundamentals

Cloud & on-prem

Security monitoring

Tools

Microsoft Entra ID

Microsoft Defender for Endpoint

Microsoft Sentinel

SIEM

Vulnerability scanners

Job description

SecOps Engineer

Department: Technology

Employment Type: Permanent

Location: Greater Montreal Metropolitan Area, Canada

Reporting To: SecOps Manager

Description

The Security Operations (SecOps) Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement across security monitoring, vulnerability management, incident response, governance, and operational security controls. Working closely with IT, engineering, and business stakeholders, the SecOps Engineer helps protect organisational assets, data, and services while supporting compliance with internal policies, security standards, and regulatory requirements.

Building innovative solutions; enabling safer workplaces for everyone.

We'll create a safer working world, building software to support a global network of responsible buyers, suppliers and partners.

We take the pain out of compliance for over 50,000 organisations globally, helping them protect their people, their operations, and the planet.

Keeping our network of hiring clients, suppliers, and contractors compliant with the standards that matter most, from health and safety and sustainability to ethical behaviour by building best in class solutions.

The tech we build today, will create a better tomorrow.

What that means day-to-day:

• Monitor and investigate security alerts and incidents.
• Conduct threat hunting activities using SIEM, EDR, and cloud security platforms.
• Manage vulnerability scanning, assessment, prioritisation, and remediation tracking.
• Develop and maintain security monitoring rules and detection logic.
• Support incident response investigations and forensic activities.
• Administer security platforms such as Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools.
• Review and improve security configurations across cloud and on-premises systems.
• Support third-party risk assessments and supplier security reviews.
• Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities.
• Develop security automation, scripts, and operational procedures.
• Deliver security awareness guidance and support business stakeholders on security matters.
• Manage disaster recovery plans and coordinate testing.
• Assist infrastructure team with firewall, network and core infrastructure management.

What you’ll need to be successful:

• Hands-on experience triaging, investigating, and responding to security alerts or incidents.
• Microsoft Entra ID, Microsoft Defender for Endpoint, Microsoft Sentinel
• Advanced knowledge of back-office systems.
• A good understanding of network technologies.
• Previous experience of building/maintaining infrastructure equipment on premise and in a cloud environment.
• Vulnerability management

Skills and Competencies

• Microsoft 365 administration.
• Windows Server.
• Excellent customer service skills and telephone manner.

Personal Attributes

• Adaptable and flexible
• Ability to work under pressure of tight timescales.
• Enthusiastic and pragmatic

What you’ll get in return:

We have a hybrid workplace policy. We want you to be able to do your best work here. We emphasize providing many ways to support our team to do their best work, and believe that if you look after your people, they look after everything else!

Personal Health & Wellbeing

• Integrated mental health & wellbeing support
• Vacation - starting at 3 weeks
• Wellness Days & Annual Giving Day - an extra to give back to yourself or your community
• Comprehensive medical and dental coverage
• End of the year, company-wide shut down for you to relax and recharge

Future Planning

• LinkedIn Learning License for upskilling & development

Interested but don't feel you meet all the requirements?

Our recruitment team assesses and reviews all applications against the role and business needs. We believe in people having transferable and soft skills and want you to know that we consider applications that might not meet all the criteria, but have the aptitude and capability, nonetheless. Our priority is to ensure we set people up for success. We will make a final call based on our determining whether we can offer the necessary support to upskill or provide the developmental support needed for you to get the best out of this opportunity with us!

Bring Your Whole Self to Work.

We are proudly an equal-opportunity employer. We are committed to ensuring that no candidate is discriminated against because of gender identity and expression, race, disability, ethnicity, sexual orientation, age, colour, region, creed, national origin, or sex. We are dedicated to growing a diverse team while continuing to create an inclusive environment where everyone feels safe and empowered to be themselves.

What you can expect if you apply:

• A response to your application within 15 working days
• An interview process consisting of:
• An initial discovery call with the recruiter
• A first stage interview via Microsoft Teams
• Additional interview with the stakeholders you'll be working with closely in the role

We're keen to ensure our hiring process allows you to be at your best, so if you need us to make any adjustments, please just let us know.