Staff Security Operations & Detection Engineer - Remote

Workleap Inc.; Montreal; Hybrid; CAD 125,000 - 160,000; Full time

Benefits offered by this job

Annual bonus

LTIP

Health insurance with telemedicine

Flexible vacation

Remote work with Montreal office

In-person gatherings

Claude access

Job summary

Workleap Inc. is seeking a Staff-level security professional to own how threats are detected, investigated, and responded to across Workleap and ShareGate. You will build the AI layer that runs detection and response, turning noisy findings into actionable triage and evidence-backed decisions.

This hands-on role reports to the Infrastructure and Security team. You’ll lead end-to-end detection engineering aligned to MITRE ATT&CK, drive reductions in false positives, and partner with developers to

Qualifications

• 7+ years in security operations, incident response or detection engineering, with recent hands on time in a cloud SaaS environment.
• Deep experience validating noisy findings, tuning false positives at the source, and deciding with incomplete evidence whether something is real.
• Experience working with developers to ship fixes without authority and maintain relationships when the answer is no.
• Built and shipped agent systems for security work that others depend on, with evals to trust outputs.
• Knowledge of agentic systems failures and defenses (prompt injection, tool permissions, credentials).
• Detections as code, SIEM query language proficiency, false positive measurement.
• Strong understanding of identity and cloud attack paths, ideally Azure/Entra ID.
• Bonus: managing a detection partner, threat hunting or forensics; French language a plus.

Responsibilities

• Build end-to-end security operations pipeline integrating alerts and findings from sources, triage and enrich investigations, route results to teams with evidence and fixes.
• Define the trust model for agents, specify what they close alone, recommend, or escalate to humans.
• Reduce false positives and misrated findings so each routed finding is real and prioritized.
• Own detection engineering end-to-end, map to MITRE ATT&CK and ensure coverage across platform changes.
• Lead security incident response from triage to postmortem with evidence gathering and partner accountability.
• Make security a partner for developers by delivering findings with clear evidence and fix paths.

Skills

Security operations

Incident response

Detection engineering

Cloud SaaS

Azure & Entra ID

Threat hunting

Prompt injection

Managed detection

French language

Job description

Workleap Inc. is seeking a Staff-level security professional to own how threats are detected, investigated, and responded to across Workleap and ShareGate. You will build the AI layer that runs detection and response, turning noisy findings into actionable triage and evidence-backed decisions.

This hands-on role reports to the Infrastructure and Security team. You’ll lead end-to-end detection engineering aligned to MITRE ATT&CK, drive reductions in false positives, and partner with developers to