Staff Specialist, Security Operations

Job not on LinkedIn

🔥 10 minutes ago

🇨🇦 Canada – Remote

💵 $125k - $160k / year

⏰ Full Time

🔴 Lead

🛡️ Security Operations

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Workleap

WebsiteLinkedInAll Job Openings

201 - 500 employees

👥 HR Tech

☁️ SaaS

⚡ Productivity

💰 Private Equity Round on 2023-06

HR Tech • SaaS • Productivity

Workleap is a company that provides an integrated platform designed to improve the employee experience by focusing on engagement, performance, and development. Their suite of products includes Officevibe, Pingboard, and various Learning Management Systems (LMS) that help businesses tackle challenges like hybrid work, onboarding, professional development, and performance management. Workleap aims to create happier and more productive workplaces by making it easier for HR teams to manage and enhance their HR strategies. With a customer base exceeding 20,000 leaders globally, Workleap offers tools that are easy to implement and integrate with existing HR and productivity systems.

📋 Description

• Build the end-to-end security operations pipeline, including alert integrations, triage, enrichment, correlation, investigation authoring, and routing results to Jira • Define the agent trust model, including evaluations, safeguards against prompt injection, and permission abuse • Eliminate false positives and poorly assessed findings from security tools • Lead detection-as-code engineering aligned with MITRE ATT&CK • Lead incident response from triage through postmortem • Oversee the managed detection partner’s performance against measurable criteria • Deliver security findings into development team workflows with evidence and a remediation path • Build detection and response agents and demonstrate their reliability • Collaborate with the Director of Infrastructure and Security, the Staff Application Security Specialist, the Security Tooling team, Infrastructure, ITX, and Product Engineering

🎯 Requirements

• English proficiency is required • 7+ years of experience in security operations, incident response, or detection engineering • Recent hands-on experience in a cloud-based SaaS environment • Strong experience validating findings, eliminating false positives, and making decisions based on incomplete evidence • Experience working directly with development teams and delivering fixes without formal authority • Experience building and deploying security agent systems, such as MCP servers, Claude Skills, or custom tools • Experience with evaluations that determine the reliability of agent outputs • Understanding of failures and attacks affecting agentic systems, including prompt injection and permission and credential management • Proficiency in detection-as-code engineering and a SIEM query language • Strong understanding of identity- and cloud-based attack paths, ideally in Azure and Entra ID • Experience leading a managed detection partner, threat hunting, or forensics experience is an asset • French proficiency is an asset

🏖️ Benefits

• Annual bonus program • LTIP, offering participation in Workleap’s long-term growth • RRSP • Family group insurance • Telemedicine • Annual wellness budget • Flexible vacation policy • Remote work, with access to the Montreal offices • In-person gatherings twice a year • Claude available to everyone