Security Engineer

Paymentus Corporation; Richmond Hill; On-site; CAD 100,000 - 130,000; Full time

Job summary

Paymentus Corporation is seeking a seasoned SOC Engineer with Elastic SIEM expertise to lead complex log investigations, optimize SIEM infrastructure, and build automated responses using Python and PowerShell.

The role demands 5+ years in SOC, strong log analysis, incident response, threat detection, and hands-on experience with Elasticsearch, Logstash, and Kibana, plus Linux and cloud platforms (AWS/GCP/Azure). On-site in Canada, with a professional office environment.

Qualifications

• 5+ years in a SOC environment with a focus on Elastic SIEM
• Strong knowledge of log analysis, incident response and threat detection methods
• Experience with Elastic Stack (Elasticsearch, Logstash, Kibana)
• Proficiency in Python and PowerShell scripting
• Familiarity with Linux and cloud platforms (AWS, GCP or Azure)

Responsibilities

• Investigate security incidents using log data to identify threats and vulnerabilities.
• Respond to incidents in a timely and thorough manner, with complete documentation and analysis.
• Develop and maintain incident runbooks and response procedures.
• Create and refine SIEM rules, alerts and dashboards to enhance threat detection.
• Optimize detection logic to reduce false positives and improve accuracy.
• Collaborate with SOC analysts to identify and implement new use cases.
• Design and maintain a scalable Elastic SIEM infrastructure.
• Manage data ingestion from various sources for accurate logging.
• Monitor system health and performance, implementing optimizations as needed.
• Automate repetitive tasks using PowerShell and Python to improve SOC efficiency.

Skills

SOC engineering

Elastic SIEM

Log analysis

Incident response

Threat detection

Python

PowerShell

Linux

AWS

GCP

Azure

Tools

Elasticsearch

Logstash

Kibana

Job description

We're hiring a SOC Engineer! Are you an Elastic SIEM expert with a passion for threat detection and automation? We are looking for a seasoned engineer (5+ years experience) to lead our complex log investigations, optimize our SIEM infrastructure, and build out automated response capabilities using Python and PowerShell.

If you love turning data into defense, check out the details below.

Key Responsibilities:

• Investigate security incidents using log data to identify threats and vulnerabilities.
• Respond to incidents in a timely and efficient manner, ensuring thorough documentation and analysis.
• Develop and maintain incident runbooks and response procedures.
• Create and refine SIEM rules, alerts, and dashboards to enhance threat detection capabilities.
• Continuously optimize detection logic to reduce false positives and improve accuracy.
• Collaborate with SOC analysts to identify and implement new use cases.

Elastic SIEM Management:

• Design and maintain a scalable Elastic SIEM infrastructure.
• Manage data ingestion, ensuring accurate and consistent logging from various sources.
• Monitor system health and performance, implementing optimizations as needed.

Scripting & Automation:

• Automate repetitive tasks using PowerShell and Python to improve SOC efficiency.
• Develop custom scripts to enhance log parsing and event enrichment processes.

Security & Best Practices:

• Implement SIEM security measures, including user roles and access controls.
• Stay updated with the latest security trends and ensure compliance with industry best practices.

Required Skills & Experience:

• 5+ years of experience in a SOC environment with a focus on ELASTIC SIEM
• Strong knowledge of log analysis, incident response, and threat detection methodologies.
• Experience with the Elastic SIEM stack (Elasticsearch, Logstash, Kibana).
• Proficiency in PowerShell and Python scripting.
• Familiarity with network protocols, cybersecurity frameworks, and attack vectors.
• Experience with Linux and cloud platforms (AWS, GCP, or Azure).
• Excellent problem-solving skills and attention to detail.

Salary Range: $100K-130k

Thisjoboperatesinaprofessionalofficeenvironment.Thisroleroutinelyusesstandardofficeequipmentsuchaslaptopcomputers,photocopiersandsmartphones.

PhysicalDemands

Whileperformingthedutiesofthisjob,theemployeeisregularlyrequiredtotalkorhear.Specificvisionabilitiesrequiredbythisjobincludeclosevisionandabilitytoadjustfocus.Thiswouldrequiretheabilitytoliftfiles,openfilingcabinetsandbendorstandonastoolasnecessary.Theemployeeisoccasionallyrequiredtostand;walk;usehandstofinger,handle,orfeelobjects,tools,orcontrols;reachwithhandsandarms;andstoop,kneel,crouchorcrawl.Theemployeemayberequiredtolifeupto25lbs.

PositionType/ExpectedHoursofWork

Thisisafull-timeposition.DaysandhoursofworkareMondaythroughFridayduringnormalbusinesshours.Occasionaleveningandweekendworkmayberequiredasjobdutiesdemand.

Travel

Minimaltravel

OtherDuties

Pleasenotethisjobdescriptionisnotdesignedtocoverorcontainacomprehensivelistingofactivities,dutiesorresponsibilitiesthatarerequiredoftheemployeeforthisjob.Duties,responsibilitiesandactivitiesmaychangeatanytimewithorwithoutnotice.

EEOStatement

Paymentusisanequalopportunityemployer.Weenthusiasticallyacceptourresponsibilitytomakeemploymentdecisionswithoutregardtorace,religiouscreed,color,age,sex,sexualorientation,nationalorigin,ancestry,citizenshipstatus,religion,maritalstatus,disability,militaryserviceorveteranstatus,geneticinformation,medicalconditionincludingmedicalcharacteristics,oranyotherclassificationprotectedbyapplicablefederal,state,andlocallawsandordinances.Ourmanagementisdedicatedtoensuringthefulfillmentofthispolicywithrespecttohiring,placement,promotion,transfer,demotion,layoff,termination,recruitmentadvertising,pay,andotherformsofcompensation,training,andgeneraltreatmentduringemployment.

ReasonableAccommodation

Paymentusrecognizesandsupportsitsobligationtoendeavortoaccommodatejobapplicantsandemployeeswithknownphysicalormentaldisabilitieswhoareabletoperformtheessentialfunctionsoftheposition,withorwithoutreasonableaccommodation.Paymentuswillendeavortoprovidereasonableaccommodationstootherwisequalifiedjobapplicantsandemployeeswithknownphysicalormentaldisabilities,unlessdoingsowouldimposeanunduehardshipontheCompanyorposeadirectthreatofsubstantialharmtotheemployeeorothers.

AnapplicantoremployeewhobelievesheorsheneedsareasonableaccommodationofadisabilityshoulddiscusstheneedforpossibleaccommodationwiththeHumanResourcesDepartment,orhisorherdirectsupervisor.