Staff Security Operations Engineer

Build AI-powered security operations for Workleap and ShareGate through detection engineering, incident response, and cloud security expertise. This remote role connects to Montreal.

As a Staff individual contributor, you will own how Workleap detects, investigates, and responds to threats. You will build agent systems that triage, enrich, correlate, and draft investigations across an Azure-first environment. The work supports Workleap Agent and ShareGate while improving security tooling reliability.

Key Responsibilities:

• Build end-to-end alert and finding pipelines across source tools
• Define agent trust boundaries with evaluations and security controls
• Engineer detections as code mapped to MITRE ATT&CK
• Lead incident response from triage through postmortem
• Deliver findings to developers with evidence and fix paths

Requirements:

• Seven-plus years in security operations, response, or detection engineering
• Recent hands-on experience in cloud SaaS environments
• Experience building dependable security agent systems and evaluations
• Fluency with SIEM query languages and measured false positives
• Knowledge of Azure, Entra ID, identity, and cloud attack paths

Shape trusted AI security operations at Workleap using incident response, detection engineering, and cloud security judgment every day.