Senior Sales Engineer (Canada)

D3 Security; Vancouver; Hybrid; CAD 120,000 - 180,000; Full time

Job summary

D3 Security, headquartered in Vancouver, is seeking a Senior Sales Engineer to lead the technical side of deals, run POCs, and deliver compelling demos for SOC teams and CISOs. Remote-friendly across Canada, with preference for Vancouver or Eastern Time zones.

You will own POC criteria, tune Morpheus AI, and collaborate with product leadership to align customer feedback with feature roadmaps. Strong presales and cloud tooling experience are essential.

Qualifications

• 4+ years in security pre-sales, SOC operations, detection engineering or incident response.
• Hands-on with at least two of Splunk, Microsoft Sentinel, Google SecOps, CrowdStrike or Defender XDR, including writing queries (SPL, KQL or YARA-L/UDM).
• Python or PowerShell scripting, REST APIs, OAuth, JSON and webhooks.
• Built playbooks in a SOAR or automation platform (Splunk SOAR, Cortex XSOAR, Swimlane, Tines, Torq or D3).
• Working knowledge of LLM agents: tool calling, MCP, where they fail, and how to measure AI accuracy fairly.
• Understanding of SOC operations: triage, investigation, Tier 1-3 roles, MTTD and MTTR.
• Cloud (AWS, Azure or GCP) and networking basics: firewall allowlists and SSO.
• A track record of running scoped POCs with measurable success criteria, several at once.
• Strong presentation skills for technical and executive audiences.

Responsibilities

• Run discovery and turn the customer's needs into POC success criteria they sign off.
• Set up POC environments: connect SIEM, EDR, identity and ticketing tools, map fields and get live alerts flowing.
• Tune Morpheus AI triage rules, playbooks and response actions to the customer's data and SOC process.
• Measure AI verdicts against analyst decisions, and report accuracy, false-positive reduction and speed.
• Deliver demos and technical deep dives to SOC teams, engineers and CISOs.
• Answer security, AI governance and data residency questions, in writing when needed.
• Work closely with the VP of Product and the product team: share what customers need, bring back gaps with a clear root cause and customer impact, and help shape new features.
• Share what you learn with the SE team.

Skills

Security pre-sales

SOC operations

Detection engineering

Incident response

Tools

Splunk

Microsoft Sentinel

Google SecOps

CrowdStrike

Defender XDR

SPL

KQL

YARA-L/UDM

Job description

Location: remote in Canada. Vancouver-based, or Toronto or elsewhere on Eastern Time, preferred.

About the role

D3 Security, headquartered in Vancouver, builds Morpheus AI: an AI SOC platform that investigates and responds to every alert across a customer's SIEM, EDR, identity and cloud tools. As a Senior Sales Engineer reporting to the Sales Director, you'll own the technical side of our deals and run the proofs of concept (POCs) that win them, often head to head against other AI SOC vendors.

What you'll do

• Run discovery and turn the customer's needs into POC success criteria they sign off.
• Set up POC environments: connect SIEM, EDR, identity and ticketing tools, map fields and get live alerts flowing.
• Tune Morpheus AI triage rules, playbooks and response actions to the customer's data and SOC process.
• Measure AI verdicts against analyst decisions, and report accuracy, false-positive reduction and speed.
• Deliver demos and technical deep dives to SOC teams, engineers and CISOs.
• Answer security, AI governance and data residency questions, in writing when needed.
• Work closely with the VP of Product and the product team: share what customers need, bring back gaps with a clear root cause and customer impact, and help shape new features.
• Share what you learn with the SE team.

Requirements

• 4+ years in security pre-sales, SOC operations, detection engineering or incident response.
• Hands-on with at least two of Splunk, Microsoft Sentinel, Google SecOps, CrowdStrike or Defender XDR, including writing queries (SPL, KQL or YARA-L/UDM).
• Python or PowerShell scripting, REST APIs, OAuth, JSON and webhooks.
• Built playbooks in a SOAR or automation platform (Splunk SOAR, Cortex XSOAR, Swimlane, Tines, Torq or D3).
• Working knowledge of LLM agents: tool calling, MCP, where they fail, and how to measure AI accuracy fairly.
• Understanding of SOC operations: triage, investigation, Tier 1-3 roles, MTTD and MTTR.
• Cloud (AWS, Azure or GCP) and networking basics: firewall allowlists and SSO.
• A track record of running scoped POCs with measurable success criteria, several at once.
• Strong presentation skills for technical and executive audiences.

Nice to have

• MSSP or multi-tenant SOC experience.
• Wiz or other cloud and exposure tools; Entra ID or Okta; ServiceNow.
• Data residency or on-prem deployments.
• Competitive bake-offs against AI SOC vendors.
• French or German.

#HP #CybersecurityJobs #CanadaJobs #SalesEngineer