Build agentic security operations for Workleap and ShareGate, combining detection engineering, incident response, and cloud security expertise across a small team.

As a hands-on Staff individual contributor, you will own how threats are detected, investigated, and answered across Workleap and ShareGate. You will build systems that triage, enrich, correlate, and route findings while defining when agents act independently or require human judgment. Your work spans Azure, cloud-native SIEM and XDR tooling, Jira, and MITRE ATT&CK-mapped; detections.

Key Responsibilities:
Build end-to-end security operations integrations and agentic investigation workflows
Define agent trust models with evaluations and safeguards
Reduce false positives and correctly prioritize security findings




Own detection engineering as code mapped to MITRE ATT&CK;
Lead incident response from triage through postmortems

Requirements:
Seven-plus years in security operations, incident response, or detection engineering
Recent hands-on experience in a cloud SaaS workplace
Experience building agent systems with evaluations for trusted outputs
Fluency in a SIEM query language and measured false-positive rates
Robust understanding of identity and cloud attack paths

Shape trusted agentic detection, response, and investigation systems across Workleap and ShareGate with measurable security outcomes.
J-18808-Ljbffr

📌 Staff Security Operations Engineer Montreal
🏢 sharegateen
📍 Montreal