This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Sr. Security Operations Engineer, Incident Response in Canada.
This is an exciting opportunity for a highly skilled cybersecurity professional to play a critical role in protecting large-scale cloud environments, customer data, and business operations. In this position, you will lead complex incident response activities from detection to remediation while helping strengthen overall security resilience and operational readiness. The role combines hands-on technical investigation, security engineering, automation, and cross-functional collaboration in a fast-paced and mission-driven environment. You’ll work closely with infrastructure, observability, and product teams to improve detection capabilities, streamline response workflows, and enhance cloud security posture. This opportunity is ideal for someone who thrives under pressure, enjoys solving sophisticated security challenges, and wants to make a direct impact on systems used by millions of users. Operating within a remote-first culture, you’ll contribute to innovative security initiatives while collaborating with a highly experienced and supportive team.
Accountabilities:
- Lead and manage security incidents end-to-end, including detection, triage, containment, remediation, and post-incident analysis
- Act as incident commander during critical events, coordinating technical teams and driving effective decision-making under pressure
- Conduct in-depth investigations across cloud, endpoint, and infrastructure environments to identify root causes and assess business impact
- Collaborate with observability and automation teams to improve detection quality, reduce alert fatigue, and develop automated incident response workflows
- Contribute to the development and enhancement of incident response playbooks, runbooks, and operational documentation
- Work closely with security, infrastructure, and engineering teams to identify vulnerabilities, improve resilience, and strengthen overall security operations
- Communicate clearly and effectively with both technical and non-technical stakeholders during active incidents and post-incident reviews
- Support continuous improvement initiatives focused on operational efficiency, automation, and cloud security best practices
Requirements:
- Minimum 5 years of experience in Security Operations, Detection & Response, or Incident Response roles within cloud-based environments
- Strong hands-on experience investigating and responding to security incidents in AWS and Kubernetes/EKS environments
- Proven ability to lead incident response efforts, including containment, remediation, and coordination across multiple teams
- Experience with security monitoring and detection tools such as Splunk, Elastic, SentinelOne, CrowdStrike, or similar SIEM/EDR platforms
- Solid understanding of cloud security principles, threat detection, and real-world attack scenarios
- Strong analytical and investigative skills with the ability to correlate data from multiple security sources
- Experience improving automation within security operations workflows using scripting languages such as Python
- Familiarity with Infrastructure-as-Code concepts and cloud-native operational practices is considered an asset
- Excellent communication and collaboration skills with the ability to explain complex security concepts clearly to diverse audiences
- Ability to work effectively in a remote-first environment while aligning with Pacific Time Zone operational coverage
Benefits:
- Competitive salary ranging from CAD $150,000 to $200,000 based on experience and qualifications
- Comprehensive medical, dental, and vision coverage fully subsidized for employees and eligible dependents
- Flexible spending stipends supporting technology, wellness, lifestyle, and family-related expenses
- Remote-first work environment offering flexibility and work-life balance across Canada
- Competitive vacation and holiday policies designed to support rest and personal wellbeing
- Employee Stock Purchase Plan (ESPP) with discounted stock purchase opportunities
- Equity participation opportunities as part of the total compensation package
- Inclusive and collaborative culture focused on employee wellbeing, innovation, and professional growth
- Supportive hiring and workplace accommodations for candidates and employees requiring individualized assistance
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1