Staff Information Security Engineer - Threat Detection & Response

JobsCloseBy Editorial Insights

Visier is seeking a Staff Information Security Engineer - Threat Detection & Response in Vancouver for a full-time onsite role. You will own Visier’s threat detection and response end to end, guiding strategy, tooling, detection content, and incident response within a high autonomy team that scales security across multi cloud, identity, and endpoint telemetry. Bring 8+ years of hands on security, expert SIEM experience (Splunk preferred), MITRE ATT&CK mapping, cloud and identity coverage, incident command, and automation skills (Python, Go, or Bash). Work with developers, SREs, and offensive security to translate risks into precise defenses and accelerate operations with AI. Apply by highlighting detections as code, cross functional incident leadership, and business impact; align with Visier values of rolling up sleeves, making it easy, being proud, never stop learning, and playing to win. Base pay 130k-170k plus bonus; hybrid schedule Tue, Wed, Thu.

Position Overview This senior technical IC role owns Visier’s threat detection and response capabilities end-to-end—driving the overarching strategy, tooling engineering, detection content, and incident response processes. Operating within a high-leverage team, you will scale our security capabilities through advanced engineering and AI, directly safeguarding our multi-cloud platform, corporate identity, and sensitive customer data from sophisticated global threats. Your work will ensure our defensive posture continuously evolves ahead of the threat landscape.

Bring your 8+ years of deep information security expertise, mastery of modern SIEM architectures, and calm incident command experience to a team where you will operate with high autonomy. You will leverage your technical depth to champion engineering-first security practices, safely adopt generative AI workflows, and mentor peers to elevate our collective defense.

What you’ll deliver:

• End-to-End Pipeline Resilience: Design and operate a cohesive detection pipeline spanning multi-cloud, SaaS, identity, and endpoint telemetry to eliminate visibility gaps and ensure comprehensive logging infrastructure.
• Proactive Detection Engineering: Build, test, and tune high-fidelity detections using a modern detection-as-code framework mapped to the MITRE ATT&CK matrix, drastically minimizing false positives while prioritizing critical threat coverage.
• Incident Lifecycle Ownership: Author robust playbooks, runbooks, and escalation criteria that define how Visier handles security incidents, ensuring immediate containment during major events.
• Continuous Defensive Evolution: Lead blameless post-incident reviews and seamlessly translate post-mortem findings into automated detections and architectural hardening requirements.
• Cross-Functional Security Integration: Partner closely with software developers, SREs, and offensive security functions to convert emerging vulnerabilities and organization-specific risks into highly targeted defensive rules.
• AI-Accelerated Operations: Securely integrate and pioneer the use of Generative AI tools to accelerate detection development, alert triage, telemetry enrichment, and automated responses.

What You’ll Bring to the Table

• Education & Experience: 8+ years of hands-on experience in information security, with a proven track record of designing, owning, and scaling threat detection architectures or major incident response programs.
• Detection-as-Code Mastery: Expert-level detection engineering skills utilizing modern SIEM environments (Splunk Enterprise Security preferred) alongside fluent structural mapping to the MITRE ATT&CK framework.
• Cloud & Infrastructure Fluency: Deep technical experience analyzing and building threat coverages across enterprise multi-cloud environments (AWS, Azure, or GCP), core identity providers, and endpoint/EDR telemetry.
• Incident Command Presence: Proven experience acting as an Incident Commander, successfully steering cross-functional technical teams through high-pressure, complex, and high-visibility security incidents.
• Security Automation & Scripting: Strong hands-on coding proficiency (Python, Go, or Bash) to build resilient automation pipelines, data enrichments, and automated response playbooks.
• Strategic Communication: Exceptional ability to translate deeply technical indicators of compromise and complex security risks into clear, high-level business insights for executive stakeholders.

🌱 Most importantly, you share our values…

• You roll up your sleeves
• You make it easy
• You are proud
• You never stop learning
• You play to win

🚀 How we work & what we offer...

• Fixed hybrid work model: 3 days a week in office (Tuesday, Wednesday, Thursday) 
• Modern, pet-friendly downtown office spaces with collaborative areas and an on-site gym 
• Annual company All Hands in Vancouver, our entire organization travels to our Vancouver HQ for a week of team building, learning and breakout sessions
• Competitive salary, and top-tier health and wellness benefits
• Stock options and/or bonus based on your role, location, and employment type
• Generous paid time off, including volunteering days and extra days over the December holidays

The base pay range for this position in the 130,000 - 170,000 /year + bonus

Benefits and working arrangements may vary depending on your seniority, location and employment type. The compensation offered will be determined by factors such as relevant qualifications, experience, knowledge and skills. Many of our positions are eligible for additional types of compensation (e.g., commission plans, bonus, etc.) which our Talent Acquisition team will share with you if you interview for the role.