Position : "Service Owner – Security Operations, Incident Response & Cyber Defense

Location : Canada- 100% remote contract

Role Purpose The Service Owner – Security Operations, Incident Response & Cyber Defense is accountable for the strategy, governance, operational effectiveness, and continuous improvement of enterprise cyber defense capabilities.

The role owns the roadmap and service direction for security monitoring, threat detection, incident investigation, forensic capabilities, e-discovery support, attack surface management, and managed security services. The Service Owner ensures effective detection, investigation, response, and continuous improvement of cybersecurity threats across the enterprise.

The role partners with cybersecurity teams, infrastructure teams, application teams, legal, privacy, risk, compliance, and managed security service providers to strengthen enterprise cyber resilience and support regulatory obligations.

Key Responsibilities

Define and maintain the cyber defense and security operations strategy, roadmap, and future-state capability model.

Own the lifecycle management and continuous improvement of security operations capabilities.

Govern enterprise SOC services, including:

Security alert monitoring and triage

Threat detection and analysis

Incident investigation and response

Security event escalation and coordination

Establish and improve incident response processes, playbooks, operating procedures, and lessons-learned practices.

Oversee digital forensic capabilities, including investigation support, evidence handling, and post-incident analysis.

Support e-discovery activities related to cybersecurity incidents, investigations, and legal or regulatory requirements.

Own attack surface management capabilities, including:

External attack surface scanning





Vulnerability exposure identification

Security posture monitoring

Risk-based remediation coordination

Manage MSP/MSSP relationships, service delivery, performance, and continuous improvement initiatives.

Define service KPIs, SLAs, operational metrics, and maturity objectives for security operations capabilities.

Evaluate security operations technologies and recommend improvements to detection, investigation, and response capabilities.

Partner with threat intelligence, vulnerability management, infrastructure, application, and identity teams to improve cyber defense effectiveness.

Ensure security operations capabilities support regulatory, privacy, and healthcare requirements, including HIPAA-related security and incident response obligations where applicable.

Required Skills & Experience

16+ years of experience in cybersecurity operations, cyber defense, incident response, or security engineering.

Experience owning enterprise security operations or managed security capabilities.

Robust understanding of

SOC operating models

Security monitoring and alert management

Incident investigation and response

Digital forensics concepts

E-discovery processes

Attack surface management and exposure management

Threat detection and analysis

Experience managing MSSP/MSP relationships and security service providers.

Experience defining security operations roadmaps, governance models, and service improvements.

Strong stakeholder management skills across security, technology, legal, privacy, and business teams.

Experience working in regulated environments; healthcare experience and familiarity with HIPAA/security controls is preferred."

Ritesh Rawat

Raas infotek corporation

262 Chapman road, Suite 105A, Newark, DE-19702

Phone: (phone hidden) Ext: 142,

Email: [email protected]

Website: raasinfotek.com

📌 Security Operation/ Cybersecurity Operation (Canada)
🏢 Raas Infotek
📍 Canada