FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in security operations and incident response, with a strong focus on detection engineering and cloud environments. Proficient in developing security operations pipelines and collaborating with cross-functional teams to deliver actionable security findings.
Highest-signal resume keywords
Security Operations ManagementDetection Engineering As CodeIncident Response LeadershipCloud Security ExpertiseFalse Positive Tuning
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security OperationsIncident ResponseDetection EngineeringSIEM Query LanguageCloud SaaS EnvironmentFalse Positive ReductionAgent Systems DevelopmentPrompt Injection HandlingIdentity Attack PathsAzure Security
Soft Skills
CollaborationDecision MakingCommunication
Tools & Technologies
JiraMCP ServersClaude SkillsSubagentsSecurity Tooling
Industry Keywords
MITRE ATT&CKManaged Detection PartnerThreat HuntingForensicsEntra ID
Tech Stack
Tools & technologiesAzureCloud
About the role
Key responsibilities & impact- Own how Workleap detects, investigates and responds to threats across Workleap and ShareGate
- Build the end-to-end security operations pipeline, including alert integrations, agentic triage, enrichment, correlation and investigation drafting
- Connect investigation results to Jira with evidence and remediation paths
- Define the trust model for security agents, including autonomous closures, recommendations and human escalation
- Develop evaluations and secure agents against prompt injection and permission abuse
- Reduce false positives and improve finding prioritization
- Own detection engineering as code mapped to MITRE ATT&CK
- Lead security incident response from triage through postmortem
- Manage performance expectations for the managed detection partner
- Deliver actionable security findings to developers in their workflow
- Report to the Director of Infrastructure and Security and collaborate with application security, security tooling, infrastructure, ITX and product engineering teams
Requirements
What you’ll need- 7+ years in security operations, incident response or detection engineering, with recent hands-on time in a cloud SaaS environment
- Deep experience validating tooling findings, tuning false positives, and making decisions with incomplete evidence
- Years of working directly with developers and getting fixes shipped without authority
- Built and shipped agent systems for security work, such as MCP servers, Claude skills, subagents or custom tools, with evals that determine when output is trusted
- Working model of agentic-system failures and attacks, including prompt injection, tool permission scoping and credential handling
- Detection engineering experience, including detections as code, fluent SIEM query language use, and measuring false-positive rates
- Strong grasp of identity and cloud attack paths, ideally in Azure and Entra ID
- Bonus: experience directing a managed detection partner, threat hunting or forensics, and working proficiency in French
Benefits
Comp & perks- Annual bonus program
- LTIP program, share in Workleap's long-term growth
- RRSP
- Family health insurance
- Telemedicine
- Annual wellness budget
- Flexible vacation policy
- Remote work, with access to our Montreal office
- In-person gatherings twice a year
- Claude access, for everyone