Operate SIEM and SOAR capabilities remotely at Alpaca, using detection engineering and response automation to protect growing financial infrastructure.

As a Security Operations Engineer, you will own daily security operations and continuous improvement. You will onboard logs, tune detections, investigate alerts, and automate repeatable responses. The role works with Security, IT, DevOps, and Engineering while reporting to the Enterprise Security Architect.

Key Responsibilities:

Onboard, parse, normalize, and validate security log sources

Build and tune MITRE ATT&CK-aligned; detection rules

Maintain actionable alerts, dashboards, and detection coverage

Develop SOAR playbooks for enrichment and containment

Support incidents, hunts, runbooks, metrics, and on-call operations

Requirements:

Three or more years in Security Operations or detection engineering

Hands-on SIEM operation and tuning experience

SOAR playbook or response automation experience

Linux, Python, or Bash experience for security operations

Solid investigation, communication, and cross-functional escalation skills

Bring SIEM, SOAR, detection, and incident response expertise to Alpaca’s distributed Security Team.

#J-18808-Ljbffr

📌 Security Operations Engineer (H/F) (IT)
🏢 Alpaca
📍 Montreal