Senior Threat Defense & Detection Engineer — Hybrid

PSP Investments; Montreal; Hybrid; CAD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Competitive pension plans

Group insurance plans

Wellness programs

Vacation days from day one

Job summary

PSP Investments is seeking a Senior Developer, Threat Defense and Detection Engineering, to join the Security Operations Centre in Montreal. You will design, implement and maintain detections using KQL for Microsoft Sentinel and Defender XDR, and collaborate with platform teams to ensure telemetry quality and coverage across PSP’s global environment.

The role involves automating incident response, supporting production detections, and guiding analysts with best practices in detection

Qualifications

• Bachelor's degree in a technical field or equivalent experience.
• Minimum of five years hands-on cybersecurity experience in security operations, incident response or detection engineering.
• Proven software engineering practices with Python, PowerShell, Git and CI/CD.
• Advanced know-how of KQL for scalable detection and hunting queries.
• Hands-on experience with Microsoft Sentinel and Defender XDR in an enterprise environment.
• Strong familiarity with MITRE ATT&CK and security tooling (EDR/IDS/SIEM).
• English and French bilingual communication across global teams.

Responsibilities

• Detect and translate threat intel into prioritized, use-case driven detections.
• Design and write scalable KQL detection logic for Microsoft Sentinel and Defender XDR.
• Implement preventive controls and signatures in EDR/XDR and network tools.
• Onboard and tune log sources; ensure telemetry coverage and data quality.
• Test, document and release detections in Azure DevOps with CI/CD.
• Support detections in production; resolve false positives and outages.
• Lead automation for incident response and vulnerability tracking.
• Provide guidance and standard patterns across PSP’s security engineering team.

Skills

Python

PowerShell

Git

CI/CD

KQL

Microsoft Sentinel

Defender XDR

CrowdStrike Falcon

MITRE ATT&CK

Bilingual EN/FR

Education

Bachelor's degree in a technical field

Tools

Azure DevOps

Microsoft Sentinel

CrowdStrike Falcon

KQL

Job description

PSP Investments is seeking a Senior Developer, Threat Defense and Detection Engineering, to join the Security Operations Centre in Montreal. You will design, implement and maintain detections using KQL for Microsoft Sentinel and Defender XDR, and collaborate with platform teams to ensure telemetry quality and coverage across PSP’s global environment.

The role involves automating incident response, supporting production detections, and guiding analysts with best practices in detection