Staff Incident Response Engineer

About the role

The team watches over customer data and workloads in the cloud, so the work centers on spotting threats early and closing incidents cleanly. Reliability Status screening is required, and the schedule includes nights and weekends.

At a glance

What you will do

• Watch the tools that defend production and regulated systems, and connect events that look unrelated
• Lead incident response for customer-facing events and see them through to closure across teams
• Handle account-level attacks and threats against customer environments
• Write post-incident and forensic reports plus remediation plans
• Build and maintain playbooks, handbooks and security standards

What they look for

• Six or more years in related work, or an equivalent mix of schooling and experience
• Automation skills in Python or bash, and hardening of Linux, Windows or Mac systems
• Familiarity with log tooling such as Splunk and scanners like Qualys or Nessus
• A defensive security mindset and the ability to explain complex issues to executives
• Eligibility for Canadian Reliability Status, which usually means citizenship or permanent residency

Nice to have

• Certifications such as GSEC, GCIH, CEH, GCIA or CISSP