Build AI-powered security operations at Workleap, using detection engineering and incident response across a remote Canada-wide environment.
As a Staff individual contributor, you will own threat detection, investigation, and response across Workleap and ShareGate. You will build agent systems that triage, enrich, correlate, and draft investigations. The work also covers cloud security, developer collaboration, and measurable operational improvements.
Key Responsibilities: Build end-to-end alert integrations and investigation workflows
Define agent trust boundaries using evaluations and security controls
Reduce false positives and correctly prioritize findings
Write detections as code mapped to MITRE ATT&CK;
Lead incidents from triage through postmortems
Requirements: Seven or more years in security operations or detection engineering
Recent hands-on experience in cloud SaaS environments
Experience building agent systems for security work
Fluent SIEM query language and measured false-positive rates
Robust understanding of identity and cloud attack paths
Bring security operations, detection engineering, and agent-building expertise to strengthen Workleap and ShareGate protection.