SIEM SOAR Security Operations Engineer
2 days ago
Toronto, ON, Canada
Alpaca
Full-time
€90,000 - €130,000 Contract
Free with email or Google
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
Free with email or Google
By continuing, you agree to our Terms & Privacy Policy.
Operate SIEM and SOAR capabilities remotely at Alpaca, using detection engineering and response automation to protect growing financial infrastructure.
As a Security Operations Engineer, you will own daily security operations and continuous improvement. You will onboard logs, tune detections, investigate alerts, and automate repeatable responses. The role works with Security, IT, DevOps, and Engineering while reporting to the Enterprise Security Architect.
Key Responsibilities
- Onboard, parse, normalize, and validate security log sources
- Build and tune MITRE ATT&CK-aligned detection rules
- Maintain actionable alerts, dashboards, and detection coverage
- Develop SOAR playbooks for enrichment and containment
- Support incidents, hunts, runbooks, metrics, and on-call operations
Requirements:
- Three or more years in Security Operations or detection engineering
- Hands-on SIEM operation and tuning experience
- SOAR playbook or response automation experience
- Linux, Python, or Bash experience for security operations
- Strong investigation, communication, and cross-functional escalation skills Bring SIEM, SOAR, detection, and incident response expertise to Alpaca’s distributed Security Team.
Key Responsibilities
- Onboard, parse, normalize, and validate security log sources
- Build and tune MITRE ATT&CK-aligned detection rules
- Maintain actionable alerts, dashboards, and detection coverage
- Develop SOAR playbooks for enrichment and containment
- Support incidents, hunts, runbooks, metrics, and on-call operations
Requirements:
- Three or more years in Security Operations or detection engineering
- Hands-on SIEM operation and tuning experience
- SOAR playbook or response automation experience
- Linux, Python, or Bash experience for security operations
- Strong investigation, communication, and cross-functional escalation skills Bring SIEM, SOAR, detection, and incident response expertise to Alpaca’s distributed Security Team.