Technical Lead, Detection Engineer

Overview  Come make your difference in communities across Canada, where authenticity, trust and making connections is valued – as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.

At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.
Does working with some of Canada’s most talented minds in innovation supporting retail, digital consumer solutions and analytical platforms excite you? Loblaw Technology powers some of Canada’s most game-changing retail solutions, giving our customers the ability to live their lives well.
Come work with a team that values diverse ideas, fosters a culture of inclusion and develops our talent from within. Loblaw Technology gives you the chance to excel, and helps you to strive for success in a big way. Keep reading to learn more!

Role   Technical Lead, Detection Engineer, Brampton, ON

Our Detection Engineering team is embarking on an exciting new journey, focused on building cutting-edge detection capabilities to stay ahead of the rapidly evolving threat landscape. As we shape the future of threat detection across multi-cloud environments we’re looking for talented individuals to help us crafting innovative solutions to protect multi-cloud environments to combat the evolving threat landscape. If you’re eager to tackle complex security challenges and make a real impact, this is the opportunity for you.

What You’ll Do

Drive the end-to-end design, development, and technical leadership of high-fidelity, scalable detection content across multi-cloud environments (Azure, GCP, OCI etc). Define detection strategy that balances breadth, depth, and precision threat coverage across critical assets while minimizing blind spots and telemetry gaps.

Provide technical oversight for SIEM infrastructure, ensuring ingestion pipelines are optimized for scale, signal fidelity, and cost efficiency. Collaborate with platform engineering teams to continuously improve data normalization, enrichment, and event routing.

Define and enforce detection engineering best practices for SIEM rule development, tuning, and lifecycle management. Ensure content aligns with MITRE ATT&CK, threat intelligence, and operational priorities, while maintaining hygiene and performance at scale.

Engineer robust detections that scale against modern attacker tradecraft—including automated threats, AI-driven TTPs, (LotL) abuse, and emerging post-exploitation behaviors. Champion logic that reduces noise and false positives, enabling actionable signals for downstream response.

Operationalize threat intel, telemetry patterns, and anomaly baselines into advanced detection content across SIEM/XDR pipelines. Build correlation logic and multi-stage detections to surface APT activity, credential abuse, zero-day exploitation, and lateral movement etc.

Act as the detection content authority working alongside security & engineering stakeholders - IR, threat intel, and product teams. Mentor a team of detection engineers, providing code-level reviews, logic validation, and cross-domain threat modeling to maintain high-quality and battle-tested detections.

Own and evolve detection KPIs (e.g., precision, recall, MTTD, FPR). Implement automated validation and regression pipelines to continuously assess detection health, adapt logic to threat shifts, and ensure long-term signal resilience under active adversary conditions.

What You Bring

Brings a curious, analytical, and  offensive-aware mindset  to defensive detection. Continuously hunts for telemetry gaps, tests detection logic against emulated threat scenarios, and iteratively improves detection coverage and fidelity through data-driven analysis.

Demonstrated expertise in architecting and leading large-scale detection engineering efforts across multi-cloud…