Spécialiste Staff opérations de sécurité, LeapSec

The role

You will build and run the detection and response pipeline for security operations at Workleap and ShareGate. This includes an AI agent system that triages, enriches and investigates alerts, with humans making the judgment calls.

What you will do

• Build the end-to-end security operations pipeline, from tool integrations to an agentic system that triages, enriches, correlates and drafts investigations.
• Connect results to Jira so each finding reaches the responsible team with evidence and a fix path.
• Define the trust model for agents: what they close alone, what they recommend, and what always goes to a human, backed by evals.
• Eliminate false positives and poorly rated findings from security tools.
• Lead detection engineering end to end, written as code and aligned with MITRE ATT&CK.
• Lead incident response from triage to postmortem, and hold the managed detection partner to a measurable standard.
• Deliver security findings inside development teams' workflows with clear evidence and a path to fix.

Required qualifications

• Fluent English.
• 7+ years in security operations, incident response or detection engineering, with recent hands-on experience in a cloud SaaS environment.
• Strong experience validating unclear findings and deciding whether something is real with incomplete evidence.
• Years working directly with development teams to get fixes delivered without formal authority.
• Experience building and deploying agent systems for security, such as MCP servers, Claude skills or custom tools, with evals that show when their output is reliable.
• Good understanding of how agentic systems fail and are attacked, including prompt injection and tool and credential permissions.
• Detection engineering as a discipline: detections as code, a SIEM query language you know well, and measured false positive rates.
• Solid understanding of identity and cloud attack paths, ideally in Azure and Entra ID.

Nice to have

• Experience leading a managed detection partner, threat hunting or forensics.
• Comfort in French.

Benefits

• Annual bonus program.
• LTIP long-term incentive program.
• RRSP.
• Family group insurance, telemedicine and an annual wellness budget.
• Flexible vacation policy.
• Remote work with access to Montréal offices.
• In-person gathering twice a year.
• Claude available to everyone.

Before you apply

• The final offer may be adjusted based on the candidate's region to match local market conditions.

About the company

Workleap is a Montréal tech company founded in 2006, with two product lines: Workleap's agent solution and ShareGate, a Microsoft 365 migration and governance tool. More than 15,000 companies worldwide use its products.