Security Engineer (Threat Response)
S
SophosCybersecurity
Location: CanadaFull-Time
SalaryIn Canada, the base salary for this role ranges from $86,000 to $143,000. In addition to base salary, we offer additional compensation including bonus eligibility
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonSQLRESTful APIsGitHub
Requirements
- Strong enterprise incident response experience across endpoint, identity, cloud, network, and product-focused investigations.
- Practical capability in DFIR, endpoint and firewall forensics, threat hunting, detection engineering, and analysis of unstructured telemetry.
- Ability to write reliable automation in Python or a comparable language.
- Experience working with APIs and querying data using SQL.
- Working knowledge of Git and GitHub practices, including pull requests, code review, testing, and CI/CD concepts.
- Hands-on familiarity with Claude, Codex, or comparable coding agents, including context design, task decomposition, and validation of generated output.
- Ability to design and write evaluations for agentic workflows and skills, covering task success, output quality, safety, regressions, and common failure modes.
- Understanding of agent architecture, tool use, skill-based design, model portability, and AI or automation safety controls.
- Ability to design observability for automated work and use telemetry to troubleshoot, measure quality, and improve reliability.
- Clear written and verbal communication, sound opsec judgment, and ability to work effectively in a globally coordinated environment.
Responsibilities
- Own complex investigations from triage and evidence collection through containment, recovery, and lessons learned.
- Coordinate security response across IDR, engineering, product, and business teams.
- Perform DFIR and endpoint forensics, including log, network, packet, malware, and firewall analysis where applicable.
- Write and improve detections, playbooks, orchestrations, and preventions using incident and threat-hunting evidence.
- Build production-quality automation to reduce repetitive work and improve consistency.
- Design reusable, model-agnostic skills and workflows for approved AI and agent platforms.
- Use approved coding agents to support investigations, coding, testing, documentation, and detection engineering.
- Contribute through GitHub branches, pull requests, code review, tests, and controlled deployment.
- Instrument agentic workflows with logs, traces, metrics, evaluation results, and failure signals.
- Apply safety controls including least privilege, scoped tool access, approval gates, evidence validation, rollback, and human review.
View Full Description & ApplyYou'll be redirected to the employer's site
