Security Incident Response Developer

📋 Description

• Strengthen incident response capabilities by building relationships with Engineering teams, writing
• Own investigations from start to finish: triage, evidence collection, analysis, containment, and
• Act as Incident Commander for low- and medium-severity incidents, and support senior responders on
• Turn recurring incident types into repeatable workflows (intake, playbook, automation, closure)
• Report incident trends and metrics that inform team priorities
• Work with Security Engineers to monitor, refine, and expand SIEM and SOAR platforms

🎯 Requirements

• 3+ years of experience in cybersecurity
• 1–2+ years of hands-on incident response experience, owning investigations end to end
• Ability to coordinate responders and stakeholders during an incident, and know when to escalate
• Experience using a SIEM to turn noise into signal, including writing queries and tuning alerts
• Proficiency with AI coding tools (e.g., Claude Code, Cursor, ChatGPT) to build and maintain
• A workflow mindset: able to break messy, recurring problems into steps that tooling or AI can take

🎁 Benefits

• Top-tier health benefits and life insurance
• Long-term group savings with employer match, through Wealthsimple for Business
• 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year
• 90 days away: work outside Canada for up to 90 days per year
• Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS
• Hybrid team with over 1,500 employees across North America