Lead, Security Technologist

Company Summary

Come work for a company that’s committed to the success of each and every employee. A place where innovators and collaborators come together and build on each other’s talents. Where diversity is welcomed and celebrated.

FCT provides industry-leading title insurance, default solutions and other real estate related products and services to legal, lending, valuation and real estate professionals across Canada. With FCT, you will have the opportunity to build a meaningful career. Join us as we continue to do exciting work and make a big impact on our colleagues, customers and communities.

We are continually searching for great talent; individuals who possess a deep commitment to the customers and markets we serve. If you would like to join a company that is committed to the success of each employee and offers challenge, purpose and the opportunity to grow both personally and professionally in a team-oriented environment, you’ll enjoy a career with us! We understand that fostering a diverse and inclusive environment is critical for the success of our business, and we actively work towards it every day.

As a Security Technologist Lead, you will play a pivotal role in enhancing our security posture across both on-premises and cloud environments, ensuring we maximize the effectiveness of our existing technologies. A key aspect of this role will be creating a log onboarding strategy to identify security logs of interest and develop methods to integrate these logs into our SIEM, centralizing logging efforts.

This involves identifying new logs by analyzing various sources, determining their relevance to security monitoring, and ensuring their effective integration into the SIEM.

This role will be pivotal in developing new use case detections and alerts to enhance visibility against emerging and sophisticated threats. By leveraging technologies such as SOAR, you will automate playbooks and streamline our security operations, significantly reducing the time to detect and respond to incidents. This will enable our teams to focus on higher-value tasks and strategic initiatives.

The successful candidate must be able to interpret complex security information, adapting to evolving threats, implementing controls to mitigate risks and develop alerting mechanism and provide effective countermeasures.

Additionally, you will support the Security Operations team in building and enhancing cloud detection capabilities, aligning with FCT’s cloud-first strategy. This includes developing and implementing cloud-specific use cases and alerts to detect and respond to threats within cloud environments.

• Develop Log Onboarding Strategy by identifying and prioritizing relevant logs in alignment with our detection strategy. This includes scoping, testing, and implementing new SIEM data connectors where required.
• Create and implement SIEM detection rules for complex technical environments. Design custom alert logic based on sophisticated and emerging threats, utilizing XQL (Extended Query Language) for advanced detection patterns.
• Periodically review the use case library, perform attestation on existing use cases, and engage in tuning discussions. Provide recommendations for improvements to adapt to evolving threat landscapes.
• Utilize scripting languages like Python and automation solutions such as SOAR to streamline manual tasks and automate incident response playbooks to reduce mean time to respond and enable teams to focus on high value activities.
• Employ various cybersecurity techniques to assess information systems. Lead security initiatives and assist in enterprise-level projects, implementing security solutions and conducting Proof of Concept for modern technologies.
• Work closely with cross functional teams to integrate security measures and detection capabilities into cloud deployments, ensuring that security is embedded into the design and operational processes.
• Ensure thorough documentation of detection rules and related runbooks and processes for use by the Security Operations team.
• Oversee the management and maintenance of security operations owned platforms, including…