Staff Security Operations Specialist, LeapSec

The role

You will own how Workleap detects, investigates and responds to threats across Workleap and ShareGate. You will also build the AI layer that runs security operations, where agents triage and investigate and people make the calls that need judgment.

What you will do

• Build the pipeline that pulls alerts and findings from all source tools and routes each result to the owning team in Jira with evidence and a fix path.
• Build an agentic system that triages, enriches, correlates and drafts investigations.
• Define the trust model for agents: what they close alone, what they recommend, and what always goes to a human, backed by evals and protection against prompt injection and permission abuse.
• Remove false positives and misrated findings from security tooling.
• Own detection engineering as code, mapped to MITRE ATT&CK.
• Lead security incident response from triage to postmortem.
• Hold the managed detection partner to a measurable standard.
• Deliver findings to developers in their workflow with clear evidence and a fix path.

Required qualifications

• 7+ years in security operations, incident response or detection engineering, with recent hands-on time in a cloud SaaS environment
• Deep experience validating unclean findings, tuning out false positives at the source, and deciding with incomplete evidence
• Years of working directly with developers to get fixes shipped without authority
• Built and shipped agent systems for security work (such as MCP servers, Claude skills, subagents or custom tools) with evals
• Working model of how agentic systems fail and get attacked, including prompt injection, tool permission scoping and credential handling
• Detection engineering as a discipline: detections as code, fluent in a SIEM query language, measured false positive rates
• Strong grasp of identity and cloud attack paths, ideally in Azure and Entra ID

Nice to have

• Experience directing a managed detection partner
• Threat hunting or forensics experience
• Working proficiency in French

Benefits

• Annual bonus program
• LTIP program, share in Workleap's long-term growth
• RRSP
• Family health insurance
• Telemedicine
• Annual wellness budget
• Flexible vacation policy
• Remote work, with access to the Montreal office
• In-person gatherings twice a year
• Claude access for everyone

Before you apply

• Hiring process: a first call with a recruiter, a virtual interview with the hiring manager, a take-home case study, then a meeting with future colleagues to discuss it.
• AI supports certain hiring steps, but every hiring decision remains human.

About the company

Workleap is a Montreal-based tech company founded in 2006, with two product lines: Workleap Agent and ShareGate. More than 15,000 companies worldwide use its products.