5 hours ago
Toronto, CanadaSenior
Responsibilities
- Monitor and analyze security events and alerts from SIEM, EDR, SASE, and related sources.
- Lead security incident response, including investigation, containment, eradication, recovery, root-cause analysis, and preventive recommendations.
- Develop and maintain incident response plans, playbooks, and procedures, and coordinate with IT, Engineering, Legal, and other teams.
- Manage security tools and technologies and develop automation scripts and workflows to improve security operations.
- Use Google Cloud services for security automation, event enrichment, data processing, analysis, and response.
- Manage and maintain infrastructure through Terraform.
- Conduct threat research, implement detection rules and use cases, and evaluate emerging security tools and technologies.
- Contribute to security architecture, security controls, secure development practices, compliance, audits, and management reporting.
- Mentor junior security analysts and engineers and participate in an on-call rotation.
Requirements
- Bachelor of Science in Computer Science or a related field.
- Either at least 7 years of cybersecurity experience with a strong focus on incident response or at least 3 years of security operations experience with hands-on SOAR and automation tools.
- Deep understanding of security concepts, principles, technologies, monitoring, and incident response.
- Experience configuring and administering SIEM and EDR tools and leading incident response processes.
- Proficiency in scripting languages such as Python or Go.
- Experience with Infrastructure as Code tools such as Terraform or Ansible, or a strong desire to learn.
- Experience with threat intelligence platforms and security operations implementation.
- Strong analytical, problem-solving, collaboration, communication, and interpersonal skills.
- Preferred qualifications include security certifications such as OffSec or GIAC, digital forensics experience, cloud security experience with AWS, Azure, or GCP, SOAR experience, networking and security knowledge, and security community contributions.
Benefits
- For Canada applicants, the full-time role offers a base salary range of $130,600—$163,200 CAD, exclusive of bonus, equity, and benefits.
- Toronto-area employees living within 65 km of the downtown headquarters collaborate in-office Monday through Thursday and receive 10 or 20 flexible remote days each quarter depending on distance.
- The company supports equal employment opportunity and provides recruitment assistance for applicants who need accommodations.
- The hiring process includes recruiter review, interviews, reference checks, and background checks; additional checks may apply to US candidates.
About League
League builds a healthcare experience platform used by payers, providers, and employers to deliver personalized navigation, engagement, and member services. The privately held company, founded in 2014 and headquartered in Toronto, licenses its platform and solutions to health plans and health systems; customers include Manulife, SCAN, Geisinger, Medibank, Baptist, and Shoppers Drug Mart. Its cloud platform supports HIPAA, SOC 2 Type II, GDPR, and HITRUST r2 compliance.