Senior Security Engineer, Detection and ResponseAs Marqeta's Senior Security Engineer on the Security Operations and Response team, you will lead incident response for North America and shape how we detect and respond to threats using AI-driven automation in a Next-Gen Agentic SOAR. You'll join a Security Operations & Response team that builds its own AI tools to speed up investigations and strengthen Marqeta's security posture. In this role, you'll serve as the lead technical responder during security events, engineer automated detections and response workflows, run advanced threat hunts, help to build a resilient and comprehensive security operations program, and mentor junior teammates on incident response best practices, while participating in a 24x7 on-call rotation.We work Flexible First. This role can be performed remotely anywhere within the province where you reside, whether that’s Ontario, Canada or British Columbia, Canada. We’d love for you to join us!This position is for an existing vacancy.The Impact You’ll HaveServe as the lead security responder in North American timezones, triaging and investigating complex alerts and acting as a core member of the Cybersecurity Incident Response TeamParticipate in 24x7x365 on-call rotations, providing senior-level expertise and escalation support for security events and incidentsEngineer, maintain, and continuously optimize detection logic across multiple data sources, using threat modeling to keep coverage current with the evolving attack landscapeDesign detection coverage mapping that documents capabilities and identifies blind spots in the threat landscapeDevelop and track KPIs with leadership, including detection effectiveness, false positive rates, and mean time to detect, respond, and recoverCreate and maintain incident response runbooks, SOPs, and technical documentation to ensure consistent response operationsMentor junior team members in security operations best practices, detection engineering, and incident response methodologiesBuild automation workflows and orchestration playbooks that improve detection engineering,



threat hunting, and incident responseDevelop and use AI-driven tools for Security Operations and Incident ResponseConduct proactive, hypothesis-driven threat hunts across corporate and production environments, and support the logging and monitoring infrastructure that enables themWho You Are5+ years of hands‑on experience in security operations with emphasis on Incident Response and Detection Engineering. Additional expertise in threat hunting, cyber threat intelligence, and digital forensics is preferred.Industry certifications in Incident Response or related fields are strongly preferred, such as GCIH, GCFA, GIME, OSIR, or GEIR.Intellectual curiosity with a passion for understanding emerging threats, analyzing attack patterns, and continuously learning about evolving security landscapes and adversary tactics.Solid investigative instincts that compel you to dig deeper into anomalies, follow evidence trails, and reconstruct complex security incidents from fragmented data.Commitment to proactive learning and staying ahead of evolving threats by researching emerging attack techniques and sharing insights with the security team.Solid technical foundation in security concepts and technologies, with hands‑on experience using enterprise security tools including EDR, NDR, CSPM, EASM, SIEM, SOAR, and Cloud Security platforms such as Guard Duty.Proficiency with threat intelligence frameworks such as MITRE ATT&CK and their application in assessing detection capabilities and coverage gaps.Expertise in developing new threat detection use cases based on security telemetry analysis, environment baselining, actionable threat intelligence,



and incident response findings.Ability to identify detection coverage gaps across global infrastructure and collaborate with stakeholders to enhance visibility through improved logging and detection content.Strong understanding of AWS cloud services and containerization technologies.Nice-To-HavesExperience with infrastructure as code tools such as Terraform.Experience with forensic tools such as KAPE, En Case, FTK, or Volatility.Experience with Detections-as-Code infrastructure like Sigma, or YARA.Experience conducting Purple Team exercises and writing reports.Experience validating vulnerabilities or reported bugs.Experience with Observability or SRE tools and processes.Manager:Typical Process:Application submissionRecruiter phone or video callVirtual “Onsite” consisting of 3-5, 45 min interviewsOffer!Compensation and BenefitsMarqeta calibrates pay to a competitive value according to working location. When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this full-time position, reflected in CAD, is: 136,800 - 171,000We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.Along with monetary compensation, Marqeta currently offers:Multiple health insurance optionsFlexible vacation time with additional floating holidaysRetirement savings program with company contributionEquity in a publicly-traded companyMonthly stipend to support our remote work modelAnnual development stipend to support our people growth and developmentFamily-forming benefits and generous parental leave base salary top-upAbout MarqetaMarqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage

📌 Senior Security Engineer, Detection And Response Cybersecurity Remote - Ontario Or British Columbia (Vancouver)
🏢 Marqeta
📍 Vancouver