This role is HYBRID (2 days/week work in office)

This role is within the Detection Engineering & Automation function of the Global Security Operations Center (GSOC) within the Cybersecurity domain. The AI Systems Engineer (Detection Engineering) is responsible for designing and operating AI‑driven detection engineering systems, with a focus on agent orchestration, workflow automation, and token‑efficient AI usage. This role is central to the organization’s transition to a Modern SOC, where detection development is performed primarily by LLMs, automation pipelines, and orchestrated agent systems, rather than manual engineering.

Development of detections within the cybersecurity domain for the purposes of identifying external threats attempting to compromise the organization is the core focus area for this role.

Key Accountabilities

- Designing AI systems, not writing cyber detections manually, where cyber detections are generated, validated, and maintained by AI workflows

- Orchestrating agents and workflows, not relying on single-model reasoning

- Using AI selectively and efficiently, combining LLMs with deterministic code (e.g., Python) wherever more reliable

- Experienced with commercial AI tools and frontier models, actively explores the cutting edge, and understands how to engineer systems that minimize cost, maximize reliability, and avoid unnecessary AI usage.

- Translate detection requirements into: Structured prompts, Agent workflows, Deterministic processing pipelines

- Focus on system design over manual implementation, ensuring outputs are scalable and repeatable

- Design Agent Orchestration & Workflow Engineering (Design and implement multi-agent systems for detection engineering, including: Orchestrators that break down complex tasks, Specialized sub-agents for Detection generation, Tuning and false-positive reduction, Context enrichment, Documentation and validation)

- Define and optimize agent interaction patterns (chaining, feedback loops, tool usage)

- Integrate agent workflows into engineering and operational pipelines

- Intelligent Use of AI vs Deterministic Code by designing solutions that minimize unnecessary reliance on LLM reasoning

- Build orchestration tooling and deterministic workflows (e.g., Python services, rule engines, validation layers)

- Perform Context Engineering (window optimization, compression, re-use, RAG, stateless/stateful workflow design) & Token Optimization (token consumption, latency, cost)

- Act as a subject matter expert in commercial AI tooling, including: GitHub Copilot, Claude (Sonnet / Opus) or equivalent frontier LLMs, Enterprise AI platforms (e.g., AWS Bedrock or similar)

- Detection‑as‑Code & Pipeline Integration of AI systems into detection‑as‑code pipelines, ensuring detection artifacts are generated, validated, and deployed automatically, outputs are versioned, traceable, and auditable, embed AI workflows into CI/CD processes for detection generation, testing and validation, continuous tuning and maintenance

- Cybersecurity Context & Detection Enablement (guide AI systems, including Adversary behaviors and attack techniques, Threat intelligence and incident learnings).

Qualifications

- Bachelor Degree or higher in Cybersecurity or Engineering or any other relevant discipline

- Deep, hands-on experience using modern AI tools both personally and professionally

- Proven expertise working with frontier LLMs (e.g., Claude, GPT-class models)

- Experience designing or implementing AI workflows, Multi-agent or orchestrated systems, Tool-augmented LLM pipelines

- Strong understanding of Prompt engineering, Context window management, Token optimization strategies

- Experience building deterministic systems alongside AI (e.g., Python-based workflows, services, or automation)

- Strong programming skills (e.g., Python or similar)

- Foundational experience in cybersecurity (e.g., SOC, detection engineering, or security tooling)

- Ability to operate effectively in ambiguous, fast-evolving environments

Nice to Have





- Experience with AWS Bedrock or similar enterprise AI platforms

- Experience with Splunk, SIEM, or detection engineering workflows

- Exposure to SOAR platforms, particularly Splunk SOAR

- Experience generating or managing SOAR playbooks via AI or automation

- Familiarity with detection-as-code, CI/CD, or DevOps practices

- Experience working in regulated environments

Cultivates, builds, and manages relationships with a portfolio of small business clients to build a pipeline of new business and increase BMO’s market share. Applies professional consultative sales and business development practices and techniques for an assigned jurisdiction/portfolio. Actively identifies opportunities and refers to BMO colleagues as appropriate.

- Proactively develops and executes sales strategies to attract new business clients and expand existing relationships.

- Develops internal and external networks and referral sources to ensure ongoing growth of BMO's business.

- Generates appointments and opportunities to grow business results through targeted sales efforts.

- Develops, maintains, and executes a business plan, including relationship management strategies, to achieve customer retention objectives.

- Identifies prospective customers and cross-sells additional products and services to meet their needs.

- Develops client rapport and instils confidence to develop credibility and earn their trust as relationship manager.

- Understands the local market and proactively develops relationships with centres of influence.

- Delivers exceptional customer service and builds trust by providing expertise, responsive service, and support.

- Develops and maintains long-term profitable relationships and expands wallet share within the assigned portfolio.

- Answers inquiries and provides accurate information about business banking products and services.

- Understands customer needs and offers financial solutions that meet customer goals.

- Resolves or escalates issues.

- Develops solutions and makes recommendations based on an understanding of the business strategy and stakeholder needs.

- Provides advice and guidance to assigned business/group on implementation of solutions.

- Develops, maintains, and executes a business plan, including relationship management strategies, to achieve customer retention objectives.

- Breaks down strategic problems, and analyses data and information to provide insights and recommendations.

- Monitors and tracks performance, and addresses any issues.

- Coordinates the management of databases; ensures alignment and integration of data in adherence with data governance standards.

- Builds change management plans of varying scope and type; leads or participates in a variety of change management activities including readiness assessments, planning, stakeholder management, execution, evaluation, and sustainment of initiatives.

- Provides input into the planning and implementation of operational programs.

- Executes work to deliver timely, accurate, and efficient service.

- Supports the development and promotion of a business/group program.

- Follows security and safeguarding procedures and applies due diligence in accordance with Bank’s policies and ethical standards for the prevention of loss due to fraud, robbery, counterfeiting, money laundering, or defalcation.

- Maintains the confidentiality of customer and Bank information in compliance with Bank policies and procedures.

- Identifies risks and takes appropriate actions, including all documentation and other regulatory requirements to maintain operational integrity.

- Focus is primarily on business/group within BMO; may have broader, enterprise-wide focus.

- Exercises judgment to identify, diagnose,



and solve problems within given rules.

- Works independently on a range of complex tasks, which may include unique situations.

- Broader work or accountabilities may be assigned as needed.

- Take measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations.

Qualifications

- Typically between 4 - 6 years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.

- Strong financial analysis skills, with a demonstrated ability to interpret financial statements, assess creditworthiness, and provide actionable insights to drive business growth and mitigate risk.

- Robust knowledge of business banking products, lending processes and loan documentation, and supporting policies, procedures, and technologies.

- Strong experience with customer sales and service.

- Technical proficiency gained through education and/or business experience.

- Verbal & written communication skills - In-depth.

- Collaboration & team skills - In-depth.

- Analytical and problem solving skills - In-depth.

- Influence skills - In-depth.

- Data driven decision making - In-depth.

Salary

$56,000.00 - $103,500.00

Pay Type

Salaried The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

About Us

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

📌 AI Systems Engineer (Cyber Detection Engineering) (Oshawa)
🏢 BMO
📍 Oshawa