Detection & CorpSec Engineer (Remote)

What you'll do

• Build and maintain a SIEM, detections, alerts, canary tokens, and early-warning mechanisms across corporate and production systems.
• Investigate incidents, including malware analysis and timeline reconstruction, and develop response runbooks.
• Partner with IT on employee-device security, Zero-Trust VPN and corporate infrastructure, and provide security guidance across the organization.

What they ask for

• Availability for meetings and impromptu communication Monday–Friday, 9am–3pm Pacific Time.
• 5+ years of experience in security engineering, detection engineering, or a closely related field.
• Hands-on experience building or maintaining SIEM infrastructure and writing detection rules; experience with endpoint security tools.
• Strong Python engineering skills and experience shipping production code with software engineering teams; experience investigating security incidents and implementing corporate security controls.

Nice to have

• Experience with SIEM/SOAR options such as Elastic/Splunk; familiarity with Okta, authentication technology, Zero-Trust networking, AWS, or cloud-native security tooling.
• Demonstrated use of AI coding tools to build or automate security workflows; experience in a small security team or fast-paced startup environment.

Pay

$172,279 - $249,640 USD (base salary); $220,272 - $255,347 CAD (base salary); $205,587 - $238,324 CAD (base salary)

Tools

SIEM, Python, CrowdStrike, EDR, Elastic, Splunk, Okta, AWS

AI focus

The team leverages AI to work efficiently at scale; preferred experience includes using AI coding tools to build or automate security workflows.