TEST - Security engineer – SOC (VIE Toronto, Canada – 2 years)

Soprasteria; Toronto; On-site; CAD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled SOC Detection & Response Specialist to enhance its Security Operations Center. In this pivotal role, you will develop detection rules, automate incident response, and collaborate with analysts to improve security capabilities. You will be at the forefront of combating cyber threats, utilizing your expertise in SIEM platforms and threat detection techniques. This position offers a hybrid work environment, comprehensive benefits, and significant opportunities for career growth in a supportive and inclusive culture. Join a forward-thinking company where your contributions will shape the future of digital security.

Benefits

Comprehensive group benefits plan

Paid statutory holidays

3 weeks of vacation

Monthly transportation allowance

Company equipment

Friendly and inclusive culture

Excellent training and development opportunities

Qualifications

• 3+ years of SOC, Threat Detection, or Incident Response experience required.
• Expertise in SIEM platforms and cyber threat detection techniques.

Responsibilities

• Develop and fine-tune detection rules for SIEM and security monitoring platforms.
• Design incident investigation processes for efficient threat management.

Skills

SOC experience

Threat Detection

Incident Response

SIEM platforms

Cyber threat detection

KQL

Scripting (Python, PowerShell, Bash)

SOAR platforms

Education

Bachelor's degree in Information Technology

Tools

Microsoft Sentinel

Palo Alto

Splunk

QRadar

Elastic Security

Job description

TEST - Security engineer – SOC (VIE Toronto, Canada – 2 years)

• Full-time

Sopra Steria, a major Tech player in Europe with 56,000 employees in nearly 30 countries, is recognized for its consulting, digital services and software development. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organizations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a fully collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2023, the Group generated revenues of €5.8 billion.
The world is how we shape it.

We are looking for an experienced SOC Detection & Response Specialist to help build and enhance our Security Operations Center (SOC) offering. You will be responsible for developing detection rules, investigation and response workflows, security use cases, and playbooks to improve our detection and response capabilities.

Key Responsibilities:
- Develop, test, and fine-tune detection rules for SIEM and security monitoring platforms (Microsoft Sentinel, Palo Alto).
- Create and document security use cases to detect cyber threats based on MITRE ATT&CK techniques.
- Design and implement incident investigation and response processes to ensure efficient threat management.
- Build automation playbooks using SOAR tools to improve incident response efficiency.
- Collaborate with SOC analysts to refine alert tuning and reduce false positives.
- Perform threat modeling and intelligence-driven detection to proactively identify threats.
- Work with customers and internal teams to define SOC workflows and escalation procedures.
- Evaluate log sources and data ingestion strategies to enhance security visibility.
- Stay up to date with the latest threats, vulnerabilities, and attack techniques to improve SOC detection capabilities.
- Provide guidance on log source onboarding, parsing, and correlation for improved detection coverage.
- Threat intelligence analysis is a plus.

Required Skills & Experience:
- 3+ years of hands-on experience in a SOC, Threat Detection, or Incident Response role.
- Expertise in SIEM platforms (e.g., Microsoft Sentinel, Splunk, QRadar, Elastic Security).
- Experience writing custom detection rules using KQL, SPL, Sigma, or other query languages.
- Strong knowledge of cyber threat detection, attack techniques (MITRE ATT&CK), and security event analysis.
- Experience with SOAR platforms (e.g., Microsoft Sentinel Playbooks, Palo Alto XSOAR, Splunk SOAR) for automation.
- Familiarity with log sources (firewalls, EDR, IAM, cloud logs, etc.) and how to build detections based on them.
- Knowledge of incident response frameworks (NIST, SANS, etc.) and how to structure response processes.
- Scripting skills (Python, PowerShell, Bash) for automating security tasks (a plus).
- Certifications such as Microsoft Security, PaloAlto XSIAM, or equivalent certifications are a plus.

Requirement:
- Bachelor's degree in Information Technology or a related field (or equivalent experience)
- Excellent interpersonal, communication, and listening skills
- English required

- Comprehensive group benefits plan: life insurance, long-term disability, healthcare, dental, vision, and a health spending account to promote health and wellness (Sopra Steria covers 100% of premiums)
- Paid statutory holidays, sick days, personal days, as well as 3 weeks of vacation
- Monthly transportation allowance
- Hybrid work environment
- Company equipment to help you work efficiently
- A friendly, collaborative, and inclusive culture
Sopra Steria has been certified as a Great Place to Work.

We offer phenomenal career progression opportunities and benefits which you can flex to meet your needs. Excellent training and development opportunities, and the encouragement to develop your skills in a supportive and friendly environment.