Operate SIEM and SOAR capabilities remotely at Alpaca, using detection engineering and response automation to protect growing financial infrastructure.

As a Security Operations Engineer, you will own daily security operations and continuous improvement. You will onboard logs, tune detections, investigate alerts, and automate repeatable responses. The role works with Security, IT, DevOps, and Engineering while reporting to the Enterprise Security Architect.

Key Responsibilities:

- Onboard, parse, normalize, and validate security log sources
- Build and tune MITRE ATT&CK-aligned; detection rules
- Maintain actionable alerts, dashboards, and detection coverage
- Develop SOAR playbooks for enrichment and containment
- Support incidents, hunts, runbooks, metrics, and on-call operations

Requirements:

- Three or more years in Security Operations or detection engineering
- Hands-on SIEM operation and tuning experience
- SOAR playbook or response automation experience
- Linux, Python, or Bash experience for security operations
- Robust investigation, communication, and cross-functional escalation skills

Bring SIEM, SOAR, detection, and incident response expertise to Alpaca’s distributed Security Team.

📌 SIEM SOAR Security Operations Engineer (Toronto)
🏢 Alpaca
📍 Toronto