The working language is French, all internal meetings (including interviews) at Croesus are conducted in French, so a robust proficiency in French is mandatory. Croesus provides innovative, high-performance, and secure wealth management solutions that include portfolio management systems, portfolio rebalancing tools, and application programming interfaces (APIs). These solutions empower wealth management professionals to improve their productivity, enhance their client relationships, make informed decisions, and maximize the management of their assets under management.

Croesus’s mission is to provide a superior experience to its clients, users, partners, and employees and to positively impact the community. With more than 200 employees in its Montréal, Toronto, and Geneva offices, Croesus has won several industry awards for being a high-quality solution provider and an outstanding employer.

Your role is to ensure continuous monitoring of the environment, detect and qualify security incidents, and drive their resolution from reporting to closure. As the operational point of contact for the team, you manage security requests, deviations, and exceptions by translating business needs into documented risk decisions. You will also leverage the artificial intelligence capabilities integrated into our tools to accelerate triaging, enrich investigations, and automate recurring tasks.

Monitoring, Detection, and Response (SIEM / EDR) Conduct first and second-level investigations: log analysis, event correlation, and reconstructing the timeline of an incident.

Contribute to the continuous improvement of detection: fine-tuning correlation rules, reducing noise, and documenting detection use cases.

Participate in incident response: containment, eradication, recovery,



and drafting post-incident reports.

Identify recurring requests and propose their automation or transformation into self-service procedures.

Vulnerability Management and Security Hygiene Collaborate and contribute to the security culture within the company by acting as a change agent for all employees (both technical and non-technical).

Artificial Intelligence Applied to Operations Academic Background and Experience Diploma/Degree in computer science. A specialization or additional training in cybersecurity.

Technical and Professional Skills Monitoring and Detection: Concrete experience with a SIEM platform (writing queries, analyzing logs) and a modern EDR/XDR solution.

Systems and Networks: Good understanding of Windows and Linux environments, networking concepts (TCP/IP, DNS, proxy, VPN), and cloud environments (AWS, identity and access).

Artificial Intelligence: Good understanding of generative AI models and their usage in an operational context (assisted triaging, automation, drafting).

Risk Analysis: Ability to evaluate a deviation request or an alert based on its actual risk and communicate a clear recommendation to stakeholders.

Ability to simplify and explain security issues to non-technical stakeholders, in both French and English.

Certifications (Assets) Other assets: Blue Team Level 1 (BTL1), Cisco CyberOps Associate, GIAC GCIH, or a platform-specific certification for an EDR/SIEM (e.g., Annual salary + Corporate profit-sharing plan

Hybrid work, 2 days a week in office (Laval &Montreal; offices)

Gym available at our Laval head office

Ongoing training and development plan

Referral bonus

Indoor and outdoor parking & electric car recharging

Beautifully renovated and spacious office

Complimentary breakfast every morning

📌 Research Agronomist (Orléans)
🏢 Zamboni Chem Solutions
📍 Orléans