Morningstar Logo

Morningstar

Lead Security Engineer

Posted 2 Days Ago
Be an Early Applicant
Hybrid
Toronto, ON
Senior level
Hybrid
Toronto, ON
Senior level
Lead security detection and response initiatives to improve security monitoring and mitigation. Collaborate with teams for optimized threat response and mentoring.
The summary above was generated by AI

About the role:
We are seeking a Lead Security Engineer to help drive our security detection and response efforts. In this role, you will be responsible for designing, implementing, and improving security monitoring, automation, and response capabilities. You will work closely with security engineers, analysts, and cross-functional teams to strengthen our security posture.
This position is based in our Toronto office. We follow a hybrid policy of 3 days onsite and 2 days remote work.
Key Responsibilities

  • Lead security detection and response initiatives, ensuring effective threat monitoring, investigation, and mitigation.
  • Develop and maintain security detections across SIEM, SOAR, and EDR platforms.
  • Architect and optimize security automation workflows to enhance threat response efficiency.
  • Collaborate with our in-house SOC and IT teams to refine detection and preventative capabilities and reduce false positives.
  • Research and implement new security technologies and best practices to enhance monitoring and response effectiveness.
  • Perform security assessments, tuning detection rules, and developing playbooks for security incidents.
  • Mentor junior engineers and contribute to security strategy and roadmap planning.


Requirements

  • 5+ years of hands-on experience in security engineering, threat detection, and response.
  • Strong expertise with SIEM, SOAR, and EDR.
  • Experience developing and tuning detections using logs, telemetry, and threat intelligence.
  • Proficiency in scripting and automation (Python, PowerShell, Bash, etc.).
  • Strong understanding of attack techniques (MITRE ATT&CK framework) and incident response methodologies.
  • Ability to analyze security telemetry, investigate threats, and develop effective mitigation strategies.
  • Excellent communication skills and ability to collaborate across teams.


Preferred Qualifications

  • Experience with cloud security monitoring (AWS, Azure, GCP).
  • Familiarity with security frameworks (NIST, CIS, ISO 27001).
  • Certifications such as GIAC (GCDA, GCIH, GCFA), OSCP, CISSP, or relevant credentials.


If you are passionate about security, automation, and detection engineering, we'd love to hear from you! Apply today to be a part of our growing security team.
Morningstar's hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. We've found that we're at our best when we're purposely together on a regular basis, at least three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.

Top Skills

AWS
Azure
Bash
Cis
Edr
GCP
Iso 27001
Nist
Powershell
Python
SIEM
Soar

Similar Jobs at Morningstar

5 Days Ago
Hybrid
Toronto, ON, CAN
Senior level
Senior level
Enterprise Web • Fintech • Financial Services
The Senior Application Security Architect will guide product teams on security measures, perform threat modeling, and enhance application security standards.
Top Skills: Application SecurityCloud SecurityRisk AssessmentSecure CodingThreat ModelingVulnerability Management
5 Hours Ago
Hybrid
Toronto, ON, CAN
Mid level
Mid level
Enterprise Web • Fintech • Financial Services
The Client Implementation Analyst ensures effective onboarding of clients to Sustainalytics data solutions, acting as a key point of contact during the implementation process.
Top Skills: Sustainalytics DatasetsThird-Party Platforms
2 Days Ago
Hybrid
Toronto, ON, CAN
Mid level
Mid level
Enterprise Web • Fintech • Financial Services
The Site Reliability Engineer ensures the reliability of cloud infrastructure, automates operations, and improves observability through effective incident management and deployment of resilient systems.
Top Skills: AWSBashCdkCi/CdCloudFormationDatadogDockerGitKubernetesLinuxNew RelicPythonSplunkTerraform

What you need to know about the Ottawa Tech Scene

The capital city of Canada and the nation's fourth-largest urban area, Ottawa has proven a rapidly growing global tech hub. With over 1,800 tech companies, many of which are leaders in their sectors, the city's tech talent now makes up more than 13 percent of its total workforce. This growth is driven not only by the big players like UL Solutions and Dropbox, but also by a thriving startup ecosystem, as new businesses emerge to follow in the footsteps of those that came before them.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account