Security Advisor Specialist - Detection Engineering

Montreal, QC
Permanent
Full-time

1 month ago

Our employees are at the heart of everything we do. Together, we help people, businesses, and society prosper in good times and be resilient in bad times.Our employee promise represents Intact’s commitment to you in exchange for living our Values, striving to do your best work, being open to change and investing in your career. In return, we promise to provide support, opportunities and performance-led financial rewards at a workplace where you can shape the future, win as a team and grow with us.Pay at Intact is about much more than just salary.Flexible work arrangements and a hybrid work modelPossibility to purchase up to 5 extra days off per yearMultiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much moreShare plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)Salary range (but not limited to): 118,700 - 145,100Annual bonus target, based on the base salary, with a potential payout of up to double the target (subject to personal and company performance): 15%As part of our commitment to Win As A Team, we share our success with employees through our annual bonus plan and Employee Share Purchase Plan (ESPP) – with Intact matching 50% of your net shares.Our pension offerings provide flexibility and long-term security for our employees beyond their careers. We are one of the few companies offering the opportunity to receive guaranteed income for life via our defined benefit pension plan.Salary for the candidate will be determined taking into consideration a number of factors including: experience, skills, qualifications, anticipated contribution to role, internal equity, etc. The salary range presented above is based on a 35-hour workweek and would represent a majority of different candidate profiles. However, we encourage candidates who may fall outside of this range to apply as well.About the roleIntact Insurance is seeking a passionate and experienced Security Specialist to join our cyber security team. If you are driven by security challenges and have strong technical expertise, we want to meet you.What you'll do here:Collaborate as a member of the development team to design, implement, and maintain robust security solutions in cloud environments.Integrate security practices seamlessly throughout the application lifecycle to enhance the overall security posture.Proactively identify and resolve security issues using advanced troubleshooting, analysis, and remediation skills.Develop and maintain secure and scalable solutions within a containerized environment, ensuring high reliability and performance.Conduct tuning activities to mitigate false positive or noisy alerts.Use big data and real-time streaming technologies to build and refine threat detections.Investigate anomalous and suspicious behavior for new detection opportunities.Conduct alert validation and triage within SIEM and EDR platforms.Research, build, and maintain detection capabilities for the latest threats across SIEM correlations and security tool signatures.Research and innovate net new mitigation, detection, and response capabilities given input.
from industry trends, customer feedback, and personal research.Build security detections and detection frameworks.What you bring to the table:Good Understanding of Log sources: EDR, SIEM, NDR, DNS, email, web proxy, identity (AD/Azure AD), SaaSGood Understanding of Query languages: SPL, KQL, SQL; correlation and pivoting techniquesGood Understanding of Detection engineering: rule writing, ATT&CK mappingGood Understanding of Detection-as-CodeUnderstanding of threat actors, motivations, and campaignsUnderstanding of Phishing/social engineering, initial access vectors, privilege escalation, lateral movement, exfiltrationUnderstanding of Frameworks: MITRE ATT&CK/D3FEND, Cyber Kill ChainKnowledge of indicators of compromise (IOCs) vs indicators of attack (IOAs)AWS/Azure/GCP identities, logging, network controls; common attack paths (IMDS, SSRF, misconfig.5 to 8 years in cybersecurity or DevOps or infrastructure team.At least 3 years of experience in IT Security monitoring (SIEM, SOAR, XDR, TIP, UEBA).Ability to work effectively in a team while being autonomous.Excellent communication and collaboration skills.Passion for continuous learning and innovation.Your experience and application knowledge in the insurance field, an asset.Good understanding of common security gaps in data/AI applicationsBilingual (French and English): Need to interact on a regular basis with an English-speaking clientele and colleagues across the country.No Canadian work experience required however must be eligible to work in Canada.#LI-HybridCe poste jouera un rôle essentiel au sein de notre équipe. | This position will fill an essential role in our team.We are an equal opportunity employerAt Intact, our Value of respect is founded on seeing diversity as a strength. We strive to create an accessible workplace where employees feel valued, included and encouraged to share their unique perspectives.We encourage applications from individuals who are members of equity-deserving groups, including but not limited to women, Indigenous peoples, persons with disabilities, Black people, and members of the 2SLGBTQI+ community.As part of Intact’s commitment to reconciliation, we acknowledge that we work, meet and travel across the land currently called Canada, originally inhabited by First Nations, Metis and Inuit people. This history extends through many centuries and continues to evolve today.We have policies to ensure equal access and participation for people with disabilities, including providing workplace adjustments (accommodations). A copy of applicable policies is available on request.If we can provide a specific adjustment to make the recruitment process more accessible for you, please let us know when we reach out about a job opportunity. We’ll work with you to meet your needs.Please note that Intact does not provide sponsorship or other support for immigration-related matters including but not limited to employer-specific closed work permits. Candidates must be eligible to work in Canada from the anticipated start date and throughout their employment and are solely responsible for maintaining their work eligibility.If you are an employee of Intact or belairdirect, please apply for this role on Internal Career Site.

Intact Financial

Apply Now