Entity: WELL Health Technologies Corp.
Position Title: Security Engineer
Salary Range: $165,000 - $185,000 CAD per annum
Job Class: Full Time
Work Location: Remote
Position Summary:Reporting into the Security Engineering and Operations team, the Security Engineer helps evolve and operationalize the security tooling at WELL Health. This is a hands-on, remote role focused on owning our detection and response stack, running investigations and threat hunts, building detections, developing the processes and metrics that keep operations consistent, and partnering across GRC, incident response, and tool evaluation to continuously raise our overall security posture.
What you will be doing: - Own the SIEM. Deploy, evolve, and maintain our SIEM solution, including data onboarding, data source health, and long-term architecture.
- Uplift the security tool stack. Improve and integrate our tooling across XDR, Tenable, Wiz, Nagomi, Entra, Intune, and emerging AI security tools.
- Run investigations. Perform security investigations and help improve our synthetic/AI analyst capabilities.
- Hunt and build detections. Conduct threat hunts and develop detection rules and content for the SIEM.
- Build and standardize process. Develop and mature Standard Operating Procedures (SOPs) and Methods of Procedure (MOPs), driving standardization and continuous uplift of how the security team operates.
- Measure what matters. Develop, standardize, and uplift security metrics, KPIs, and SLAs to track performance, drive accountability, and demonstrate the value and health of security operations.
- Support GRC. Provide evidence for audits and compliance, and align tooling to the standards set by our policies and procedures.
- Support incident response. Participate in and support incident response activities across various parts of the organization.
- Evaluate new tools. Support POC/POV activities to assess and select new security technologies.
- Raise the bar. Proactively surface issues and bring recommendations that improve WELL Health's overall security posture.
You have: - SIEM: hands-on experience with deployment, tuning, and rule/detection development.
- EDR/XDR: experience with endpoint detection and response and endpoint security operations.
- Vulnerability Management (VMP): experience with tools such as Tenable and Wiz.
- Incident Response: experience across detection, investigation, and containment.
- Threat hunting: detection engineering and rule development.
- Process and standards: experience developing SOPs/MOPs and driving process standardization and operational uplift.
- Metrics: familiarity with defining and reporting security metrics, KPIs, and SLAs.
- GRC: exposure to supporting audits, evidence collection, and control alignment.
- Client engagement: comfortable working directly with stakeholders (experience in an MSSP environment is a strong plus).
- Initiative: a willingness to elevate issues and come to the table with recommendations, not just problems.
- Curiosity: a genuine willingness to learn and adapt as our stack evolves.
The salary for this position falls within a defined range and will be determined based on several factors, including the candidate's experience, qualifications, skills, and the needs of the organization. At WELL, we are committed to fair and equitable compensation and aim to provide a competitive salary that reflects the value and expertise of the successful candidate.
This recruitment process uses automated tools, including artificial intelligence, to help review applications. Qualified human decision-makers review these results and make all final hiring decisions.
Want Read more about us:
https://stories.well.company/ 
