Senior SecOps Engineer: Detection & Incident Response

League; Toronto; On-site; CAD 120,000 - 160,000; Full time

Job summary

League is a leading healthcare experience platform in Canada, enabling customers to close gaps in care. We seek a Senior SecOps Engineer to join Security Monitoring, Incident Response, and Tooling teams, focusing on detection, response, tuning, and refinement.

You will work with security engineers and analysts to ensure secure operations across the platform. You will deploy and automate security workflows, leverage GCP services, and contribute to threat detection, tooling, and incident triage.

Qualifications

• Bachelor of Science degree in Computer Science (or related field).
• Minimum 7 years in Cybersecurity with a strong focus on Incident Response.
• Minimum 3 years in Security Operations with hands-on SOAR and automation experience.
• Advanced knowledge of Security Operations tools including configuration/administration.
• Proven ability to lead and coordinate incident response processes.
• Proficiency in scripting languages such as Python and Go.
• Experience building/integrating LLM-based copilots into SIEM/SOAR/EDR workflows.
• Experience with threat intelligence platforms in security operations.
• Strong analytical and problem-solving skills.
• Collaborative mindset with excellent communication.

Responsibilities

• Security Monitoring and Incident Response: manage tools and automate workflows.
• Develop automation scripts to improve security operations efficiency.
• Leverage GCP services to host and automate security scripts and tools.
• Utilize Pub/Sub, Dataflow, BigQuery, Cloud Storage for data processing and enrichment.
• Evaluate and recommend new security tools to enhance posture.
• Hands-on experience integrating LLM-based copilots into security workflows.
• Security Tooling and Automation: manage SIEM/EDR/SASE platforms and Terraform.
• Threat Management: conduct threat research and develop detection rules.
• Collaboration: work with teams, communicate risks to leadership, mentor juniors.
• Compliance: ensure alignment with HITRUST/NIST/GDPR and audit readiness.

Skills

Incident Response

Security Operations

SOAR

Automation

Python

Go

Cloud Security

GCP

LLM Copilots

Terraform

Threat Intelligence

Team Leadership

Education

Bachelor of Science in Computer Science

Tools

CrowdStrike NG SIEM

EDR

Falcon Complete

Netskope

Wiz Defend

Terraform

GCP

SIEM

SASE

Job description

League is a leading healthcare experience platform in Canada, enabling customers to close gaps in care. We seek a Senior SecOps Engineer to join Security Monitoring, Incident Response, and Tooling teams, focusing on detection, response, tuning, and refinement.

You will work with security engineers and analysts to ensure secure operations across the platform. You will deploy and automate security workflows, leverage GCP services, and contribute to threat detection, tooling, and incident triage.