Senior SecOps Engineer: AI-Driven Incident Response

League; Toronto; Hybrid; CAD 131,000 - 170,000; Full time

Job summary

League’s Toronto team is seeking a Senior SecOps Engineer to scale security across the development lifecycle, owning detection, response, tuning, and refinement. You will work with Security Engineering peers to ensure secure-by-design practices and effective incident handling.

This role emphasizes automation, cloud security, and integrating AI copilots into security workflows, with hands-on experience in CrowdStrike NG SIEM, EDR, and GCP services.

Qualifications

• Bachelor of Science degree in Computer Science (or related field).
• Minimum 7 years in Cybersecurity with strong Incident Response focus.
• Minimum 3 years in Security Operations with hands-on SOAR and automation tools.
• Advanced knowledge of Security Operations tools (CrowdStrike NG SIEM, EDR, Falcon Complete, Netskope, Wiz Defend).
• Proven leadership and coordination of incident response processes.

Responsibilities

• Security Monitoring and Incident Response: manage security tools like CrowdStrike NG SIEM, EDR, Falcon Complete, Wiz Defend, Netskope SASE; develop automation to improve efficiency.
• Security Tooling and Automation: maintain SIEM/EDR/SASE; build automation workflows; leverage GCP for event enrichment and response.
• Threat Management: conduct threat research; develop detection rules and use cases.
• Security Engineering and Architecture: contribute to design of security systems; ensure best practices.
• Collaboration and Communication: partner with teams; communicate risk to leadership; mentor junior staff.
• Compliance and Reporting: ensure compliance with HITRUST, NIST, GDPR; prepare security reports; assist audits.

Skills

Incident Response

Security Operations

SOAR

Python

Go

Threat Intelligence

LLM Integration

Cloud Security

Education

BS in Computer Science

Tools

CrowdStrike NG SIEM

EDR

Falcon Complete

Netskope

Wiz Defend

GCP (Pub/Sub, Dataflow, BigQuery)

Terraform

Job description

League’s Toronto team is seeking a Senior SecOps Engineer to scale security across the development lifecycle, owning detection, response, tuning, and refinement. You will work with Security Engineering peers to ensure secure-by-design practices and effective incident handling.

This role emphasizes automation, cloud security, and integrating AI copilots into security workflows, with hands-on experience in CrowdStrike NG SIEM, EDR, and GCP services.