Ontario, Canada (Remote)

Long-Term Contract

SGX20812

Solugenix is seeking a skilled Cybersecurity Threat Detection &

- Response professional with strong experience in SIEM, Managed Incident Detection &
- Response (MIDR/MDR), Threat Modeling, Threat Analysis, and Incident Response.

The ideal candidate will be responsible for proactively identifying, analyzing, and responding to cybersecurity threats, while continuously improving the organization's detection and response capabilities.

The role requires a strong understanding of the evolving threat landscape, security monitoring technologies, attack techniques, and enterprise security architecture.

Qualifications

- Bachelor s degree in computer science, Information Security, Cybersecurity, or a related discipline.
- 3 8+ years of relevant cybersecurity experience, depending on the seniority of the role.
- Relevant certifications are desirable, such as CISSP, CISM, GCIH, GCIA, Security+, CEH, Splunk or Cloud Security certifications.
- Strong analytical and investigative mindset.
- Ability to correlate information from multiple security tools and data sources.
- Strong understanding of cyberattack techniques and threat actor behavior.
- Ability to work effectively during security incidents and high-pressure situations.
- Strong communication and documentation skills.
- Ability to collaborate with security, infrastructure, cloud, application, and business teams.

Required Skills &

- Experience

- Strong experience in SIEM/Security Event Monitoring and security event analysis.
- Experience with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, Elastic, or similar technologies.
- Experience in Managed Detection &
- Response (MDR/MIDR), SOC operations, or Incident Response.
- Solid knowledge of Threat Analysis and Threat Intelligence.
- Hands-on experience in Threat Modeling methodologies.
- Experience investigating security incidents across endpoint, network, identity, cloud, and application environments.
- Knowledge of security logs, network protocols, authentication mechanisms,



and common attack patterns.
- Understanding of malware, phishing, ransomware, privilege escalation, lateral movement, and data exfiltration techniques.

Responsibilities Security Monitoring &

- Detection

- Monitor and analyze security events and alerts generated through SIEM and other security monitoring platforms.
- Investigate suspicious activities and identify potential security incidents.
- Develop, tune, and optimize detection rules, correlation logic, use cases, and alerting mechanisms.
- Reduce false positives and improve the overall effectiveness of security monitoring capabilities.
- Perform log analysis across infrastructure, applications, cloud platforms, identity systems, and security tools.

Managed Incident Detection &

- Response (MIDR/MDR)

- Perform initial triage, investigation, containment, and escalation of security incidents.
- Analyze indicators of compromise (IOCs), attack patterns, and anomalous behavior.
- Coordinate with internal security, infrastructure, application, and business teams during incident response activities.
- Support incident containment, eradication, recovery, and post-incident analysis.
- Document incidents, investigation findings, root causes, and recommended remediation actions.

Threat Analysis &

- Threat Intelligence

- Conduct proactive threat analysis using internal telemetry and external threat intelligence.
- Analyze attacker tactics, techniques, and procedures (TTPs).
- Map threats and detection capabilities against frameworks such as MITRE ATT&CK.;
- Identify emerging threats and assess their potential impact on the organization's environment.




- Develop actionable threat intelligence and recommendations for improving security controls.

Threat Modeling

- Conduct threat modeling exercises for applications, infrastructure, cloud environments, and enterprise solutions.
- Identify potential attack vectors, vulnerabilities, threat actors, and security risks.
- Work with application, architecture, cloud, and engineering teams to embed security considerations into solution design.
- Recommend appropriate security controls and mitigation strategies.
- Support secure architecture and secure-by-design initiatives.

Security Engineering &

- Continuous Improvement

- Develop and enhance detection use cases based on emerging threats and organizational risks.
- Automate repetitive security operations and investigation activities where possible.
- Participate in threat hunting and proactive identification of previously undetected threats.
- Contribute to improving security processes, playbooks, and incident response procedures.
- Support security assessments and provide recommendations for strengthening detection and response capabilities.

About Solugenix Solugenix is a leader in IT services, delivering cutting-edge technology solutions, exceptional talent, and managed services to global enterprises. With extensive expertise in highly regulated and complex industries, we are a trusted partner for integrating advanced technologies with streamlined processes. Our solutions drive growth, foster innovation, and ensure compliance providing clients with reliability and a strong competitive edge. Recognized as a 2024 Top Workplace, Solugenix is proud of its inclusive culture and unwavering commitment to excellence. Our recent expansion, with new offices in the Dominican Republic, Jakarta, and the Philippines, underscores our growing global presence and ability to offer world-class technology solutions. Partnering with Solugenix means more than just business it means having a dedicated ally focused on your success in today's fast-evolving digital world.

📌 Cybersecurity Threat Detection & Response Engineer (Canada)
🏢 Solugenix
📍 Canada