Senior Cybersecurity Specialist - IR

• 3-5 years of hands-on cybersecurity experience responding to high-severity and complex security incidents, including leading end-to-end investigations of complex security incidents, including scoping, deep analysis, coordinated containment, remediation, and root-cause determination across cloud and hybrid environments
• Proficiency using SIEM and EDR platforms to investigate security events and analyze large volumes of security telemetry
• Experience performing threat hunting and developing or tuning detection logic
• Knowledge of cyber threat intelligence practices, including analyzing attacker tactics and techniques and applying intelligence to improve detections and investigations
• Experience conducting incident investigations and forensic analysis to determine root cause and reconstruct attacker activity
• Experience investigating incidents in cloud environments (Azure, AWS, or GCP) including identity systems, logging, and cloud-native telemetry
• Experience working cross-functionally with engineering, IT, cloud operations, legal, and security teams to drive remediation
• Ability to work the required schedule and participate in the on-call rotation

• Experience investigating application-layer attacks, abuse cases, or SaaS platform threats
• Advanced knowledge of cybersecurity and information security control best practices
• Certifications such as CISSP, SANS, or incident response, threat hunting, or forensics certifications

• Own and lead investigations of complex security incidents to ensure rapid containment, effective remediation, and secure recovery
• Perform proactive and hypothesis-driven threat hunting across endpoints, servers, cloud environments, and applications to identify malicious behaviour and emerging threats
• Develop and improve detection logic, alert tuning, and investigation workflows to enhance threat visibility and reduce false positives
• Apply threat intelligence to strengthen detection capabilities and prioritize investigations
• Conduct incident investigations and forensic analysis to determine root cause and reconstruct attacker activity
• Take ownership of complex investigations and drive remediation efforts through to resolution
• Improve incident response playbooks, procedures, and operational processes
• Lead cyber defence workstreams within larger security initiatives
• Mentor junior team members and support knowledge sharing across the team
• Investigate complex security alerts and confirmed incidents across SIEM, EDR, NDR, and cloud security platforms

• 100% paid premiums for health, dental, and vision coverage​
• RRSP contribution match (100% up to 4%)​
• 35 days paid time off (11 holidays, 16 vacation days, 3 personal days, 5 sick days)​
• Work Away, an opportunity to work & play for 10 weeks in a country of your choice (from a Sage-approved list)
• 18 weeks of paid parental leave for birth, adoption, or surrogacy offered 1 year after your start date​
• 5 days paid yearly to volunteer (through Sage Foundation)​
• $5,250 tuition reimbursement per calendar year starting 6 months after your hire date​
• Sage Wellness Rewards Program (annual fitness reimbursement)​
• Library of on-demand career development options and ongoing training offerings​

Sage