Staff Security Operations Specialist

ShareGate

. Own how Workleap and ShareGate detect, investigate and respond to threats .

Posted 10/26/2026full-timeRemote • CanadaLead💰 CA$125,000 - CA$160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security operations and incident response, with a strong focus on detection engineering and cloud security. Capable of leading security initiatives, collaborating with cross-functional teams, and delivering actionable security findings.

Highest-signal resume keywords

Security Operations ManagementDetection Engineering As CodeIncident Response LeadershipCloud Security ExpertiseCollaboration With Developers

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection EngineeringIncident ResponseSecurity OperationsSIEM Query LanguageFalse Positive TuningAgent Systems DevelopmentThreat InvestigationSecurity Findings ValidationCloud Attack Path AnalysisMITRE ATT&CK Framework

Soft Skills

CollaborationProblem SolvingCommunicationJudgment

Tools & Technologies

JiraMCP ServersClaude SkillsSubagentsSOC 2 Evidence CollectionAzureEntra ID

Industry Keywords

Cloud SaaS EnvironmentManaged Detection PartnerThreat HuntingForensicsAgentic Systems

Tech Stack

Tools & technologies

AzureCloud

About the role

Key responsibilities & impact

Own how Workleap and ShareGate detect, investigate and respond to threats
Build the end-to-end security operations pipeline, including source-tool integrations, agentic triage, enrichment, correlation and investigation drafting
Connect security findings to Jira with evidence and a remediation path
Define the trust model for security agents and determine which actions require human judgment
Use evaluations to secure agents against prompt injection and permission abuse
Reduce false positives and correctly prioritize security findings
Own detection engineering as code mapped to MITRE ATT&CK
Lead security incident response from triage through postmortem
Hold the managed detection partner to a measurable standard
Deliver security findings to developers with clear evidence and remediation paths
Report to the Director of Infrastructure and Security and collaborate with application security, security tooling, infrastructure, ITX and product engineering teams
Work on LeapSec's security operations strategy, including embedding security in product squads and automating SOC 2 evidence collection

Requirements

What you’ll need

7+ years in security operations, incident response or detection engineering, with recent hands-on time in a cloud SaaS environment
Deep experience validating tooling findings, tuning false positives, and deciding with incomplete evidence whether something is real
Years of working directly with developers and getting fixes shipped without authority
Built and shipped agent systems for security work, such as MCP servers, Claude skills, subagents or custom tools, with evaluations that determine when output is trusted
Working model of agentic-system failures and attacks, including prompt injection, tool permission scoping and credential handling
Detection engineering experience, including detections as code, fluent SIEM query-language use, and measuring false-positive rates
Strong grasp of identity and cloud attack paths, ideally in Azure and Entra ID
Bonus: experience directing a managed detection partner, threat hunting or forensics, and working proficiency in French

Benefits

Comp & perks

Annual bonus program
LTIP program, share in Workleap's long-term growth
RRSP
Family health insurance
Telemedicine
Annual wellness budget
Flexible vacation policy
Remote work, with access to the Montreal office
In-person gatherings twice a year
Claude access, for everyone