[Hiring] Staff Security Operations Specialist @Workleap

Role Description

You will own how Workleap detects, investigates and responds to threats across Workleap and ShareGate, and you will build the AI layer that runs it. This role exists now to turn detection and response into a system where agents triage, enrich and investigate, and people make the calls that genuinely need judgment. It is a hands-on Staff individual contributor role with no direct reports.

• Build the pipeline that runs security operations end to end:
• Integrations that pull alerts and findings out of every source tool.
• An agentic system that triages, enriches, correlates and drafts the investigation.
• A connection into Jira that routes each result to the owning team with evidence and a fix path.
• Define the trust model for those agents, deciding what they close alone, what they recommend and what always goes to a human.
• Drive false positives and misrated findings out of our security tooling.
• Own detection engineering end to end, written as code and mapped to MITRE ATT&CK.
• Lead security incident response from triage to postmortem.
• Make security a partner developers want to work with, delivering findings in their workflow with clear evidence and a fix path.

Qualifications

• 7+ years in security operations, incident response or detection engineering, with recent hands-on time in a cloud SaaS environment.
• Deep experience working findings that are not clean.
• Years of working directly with developers, getting fixes shipped without authority.
• Built and shipped agent systems for security work that others depend on.
• A working model of how agentic systems fail and get attacked.
• Detection engineering as a discipline.
• Strong grasp of identity and cloud attack paths, ideally in Azure and Entra ID.
• Bonus: experience directing a managed detection partner, threat hunting or forensics, and working proficiency in French.

Requirements

• Experience validating what tooling flags and tuning false positives out at the source.
• Ability to decide with incomplete evidence whether something is real.
• Fluency in a SIEM query language.
• Measurable false positive rates.

Benefits

• Base salary: $125,000 - $160,000.
• Annual bonus program.
• LTIP program, share in Workleap's long-term growth.
• RRSP + Family health insurance + telemedicine + annual wellness budget.
• Flexible vacation policy.
• Remote work, with access to our Montreal office.
• In-person gatherings twice a year.
• Claude access, for everyone.