Staff Security Operations Engineer

Job summary

The role involves designing and implementing security operations practices, controls, and policies to protect critical infrastructure. You will also lead threat identification, incident response, and security architecture improvements while collaborating with engineering teams.

Job details

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Security Operations Engineer based in Canada. This is a senior security engineering opportunity focused on strengthening the security and resilience of critical infrastructure and open-source ecosystems. You’ll help design, implement, and evolve security operations practices, controls, tools, and policies across a globally distributed environment. The role combines hands-on cyber defense, security architecture, threat intelligence, risk management, and incident response. You’ll work on identifying sophisticated threats, containing attacks, guiding remediation, and improving security assurance through measurable practices. The position also offers the opportunity to influence engineering teams, contribute to threat intelligence initiatives, and share security expertise with the broader community. You’ll operate in an agile, highly technical environment where autonomy, continuous learning, and strong technical judgment are valued. This role is particularly suited to a security professional motivated by challenging adversaries and raising the standard of security across the wider technology ecosystem. \n Accountabilities Implement and continuously evolve security operations standards, procedures, playbooks, and practices across the organization. Analyze and improve security architecture, identifying opportunities to strengthen infrastructure, systems, and development processes. Evaluate, select, deploy, and improve security tools, technologies, and operational practices. Identify, investigate, contain, and support the remediation of security threats and cyber attacks. Apply threat modelling and risk management practices to identify vulnerabilities, assess potential impact, and prioritize appropriate controls. Lead or contribute to tabletop exercises and other security operations activities across engineering, information systems, and technical teams. Develop and maintain security operations learning and development materials to strengthen organizational security capabilities. Monitor and track security operations KPIs, using measurable outcomes to assess effectiveness and guide continuous improvement. Contribute to open-source threat intelligence initiatives and share relevant security knowledge with the broader community. Develop thought leadership through technical presentations, blog posts, whitepapers, industry events, and other professional forums. Partner with security leadership to communicate risks, present findings, influence decisions, and drive meaningful security improvements. Plan and deliver security operations initiatives within an agile engineering environment while managing priorities and dependencies. Requirements Exceptional academic track record, with an undergraduate degree in Computer Science, STEM, or a compelling equivalent professional background. Deep personal interest in cybersecurity and a demonstrated motivation to work at the forefront of security technology. Strong experience with threat modelling and established risk management frameworks. Strong knowledge of security architecture and modern, industry-leading security tools. Experience consuming and contributing to threat intelligence feeds and using intelligence to inform defensive strategies. Practical knowledge of security risk management frameworks such as NIST CSF. Familiarity with security standards and frameworks such as ISO 27001. Proven ability to exceed expectations, take ownership, and deliver results in technically demanding environments. Strong analytical and problem-solving capabilities, with sound judgment when assessing security risks and responding to complex threats. Preferred: Experience working within a Security Operations team or Security Operations Center (SOC). Preferred: Hands-on experience with offensive or defensive security teams and practical cyber defense capabilities. Preferred: Experience defending against advanced persistent threats, highly sophisticated adversaries, or nation-state-level actors. Strong communication and collaboration skills, with the ability to explain complex security issues and influence technical and organizational stakeholders. Benefits Globally distributed, remote-first working environment. Twice-yearly in-person team sprints and opportunities to collaborate with colleagues internationally. Annual personal learning and development budget of USD 2,000. Annual compensation reviews based on location, experience, performance, and contribution. Performance-driven annual bonus. Recognition and performance rewards. Annual holiday leave. Maternity and paternity leave. Employee Assistance Programme. Opportunities to travel internationally and meet colleagues at company events. Travel benefits such as Priority Pass and upgrades for eligible long-haul business travel. Opportunity to work on technically challenging security initiatives with global impact. Exposure to open-source security, threat intelligence, advanced cyber defense, and security engineering practices. \n How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1

What you’ll do

The role involves designing and implementing security operations practices, controls, and policies to protect critical infrastructure. You will also lead threat identification, incident response, and security architecture improvements while collaborating with engineering teams.

Requirements

Candidates must have an undergraduate degree in a STEM field and strong experience in threat modelling and risk management frameworks. Proficiency in modern security tools and a proven ability to deliver results in technically demanding environments are essential.

Benefits

• Remote-first working environment • Twice-yearly in-person team sprints • Annual personal learning and development budget • Annual compensation reviews • Performance-driven annual bonus • Recognition and performance rewards • Annual holiday leave • Maternity and paternity leave • Employee Assistance Programme • International travel opportunities • Travel benefits

Listed skills

• Risk Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Security operations
• Threat intelligence
• Security architecture
• Risk management
• Incident response
• Threat modelling
• Cyber defense
• NIST CSF
• ISO 27001
• Security controls
• Vulnerability assessment
• Security engineering
• Agile methodology
• Technical leadership
• Security policy
• Remediation
• Blog Posts
• Technical Presentations
• Security Tools
• Influencing Skills
• Cyber Defense
• Continuous Development
• Security Risk Management
• Influencing Without Authority
• Cyber Threat Intelligence
• General Data Protection Regulation (GDPR)
• NIST Cybersecurity Framework (CSF)
• Data Privacy
• Resilience
• Technology Ecosystems
• Thought Leadership
• IT Security Architecture
• Agile Methodology
• Artificial Intelligence
• Communication
• Computer Science
• Information Systems
• Continuous Improvement Process
• Cyber Security
• Information Privacy
• Incident Response
• Leadership
• Security Engineering
• ISO/IEC 27001
• Problem Solving
• Key Performance Indicators (KPIs)
• Risk Management
• Security Technology
• Technology Assessment
• Threat Modeling

Job areas

• Security & Safety
• Technology
• Software
• Engineering
• Security Operations Engineer
• Cyber Security Engineer
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other