Staff Information Security Engineer - Threat Detection & Response

About the role

Staff Information Security Engineer - Threat Detection & Response at Visier Solutions Inc. Visier Solutions Inc. is on the lookout for an experienced Staff Information Security Engineer to spearhead our threat detection and response efforts. This critical position will involve defining our security approach, enhancing our existing tools, and overseeing our incident response protocols. Your contributions will be vital in safeguarding our multi-cloud infrastructure and protecting sensitive customer data from sophisticated threats.

• Location:
  
  Vancouver, BC, Canada
• Engagement:
  Full-time
• Team:
  Threat Detection & Response

• Design and oversee a robust detection pipeline that spans multiple cloud environments, ensuring thorough visibility and comprehensive logging capabilities.
• Develop, fine-tune, and execute high-precision detection techniques utilizing a detection-as-code framework that aligns with the MITRE ATT&CK matrix, with an emphasis on reducing false positives.
• Produce detailed playbooks and runbooks to direct responses to security incidents, ensuring prompt action during emergencies.
• Conduct post-incident analyses and convert insights into actionable improvements for detection methods and security architecture.
• Work closely with software development teams and security operations to identify vulnerabilities and customize defensive measures.
• Investigate and integrate Generative AI technologies to enhance detection workflows, alert management, and automated incident responses.
• Collaborate with cross-functional teams to ensure security best practices are embedded in the software development lifecycle.
• Stay updated on emerging threats and trends in the cybersecurity landscape to continuously improve our security posture.
• Mentor junior team members and share knowledge to foster a culture of security awareness within the organization.
• Participate in security audits and assessments to ensure compliance with industry standards and regulations.
• Engage with external security communities and forums to share insights and learn from industry peers.
• Prepare and present reports on security incidents and trends to senior management and stakeholders.

• At least 8 years of experience in the field of information security, with a solid foundation in creating and managing threat detection systems or incident response frameworks.
• Strong expertise in detection engineering, particularly within contemporary SIEM platforms, ideally Splunk Enterprise Security, and experience with the MITRE ATT&CK framework.
• Comprehensive understanding of multi-cloud environments, including AWS, Azure, or GCP, along with knowledge of identity management systems and endpoint telemetry.
• Demonstrated experience as an Incident Commander, successfully guiding technical teams through high-stress security incidents.
• Proficiency in programming languages such as Python, Go, or Bash to develop automation solutions and response workflows.
• Excellent communication abilities, enabling you to articulate complex security concepts to non-technical audiences effectively.
• A proactive mindset with a strong focus on continuous improvement and innovation in security practices.

• Experience with security automation tools and frameworks that enhance operational efficiency.
• Background in creating and delivering security training programs aimed at technical teams to bolster their skills.
• Familiarity with compliance frameworks and regulations relevant to information security.

• Proficient in SIEM technologies, with a particular emphasis on Splunk.
• Knowledgeable in cloud security practices and associated tools.
• Strong analytical capabilities for conducting threat modeling and risk assessments.
• Familiarity with incident response tools and methodologies.

• This role supports a hybrid work model, requiring three days in the office (Tuesday, Wednesday, Thursday).
• The position offers a competitive salary range of $130,000 to $170,000 annually, along with performance-based bonuses.
• Comprehensive health and wellness benefits, stock options, and generous paid time off, including days for volunteering and additional holidays, are included.
• Candidates must possess eligibility to work in Canada; please note that visa sponsorship is not available for this position.