Security Detection Engineer

About the Role

act digital Canada is looking for an experienced Security Detection Engineer to support a major client in strengthening and expanding its security detection capabilities.

This is a highly technical, engineering-focused position primarily dedicated to the integration, implementation, and deployment of security detection use cases within complex enterprise environments. The role requires strong expertise in Linux systems, databases, Python scripting, and security monitoring technologies. This is not a traditional SOC analyst or incident response position. The primary focus is security detection engineering, integration, and automation rather than day-to-day security operations.

Responsibilities

• Key Responsibilities
• Detection Use Case Integration
• Detection Use Case Development
• Integrate and deploy existing security detection use cases into the organization's monitoring infrastructure.
• Adapt and configure detection logic to ensure compatibility with existing systems, data sources, and security platforms.
• Develop and maintain Python scripts to support data processing, integration, and automation activities.
• Work extensively with Linux environments to configure, troubleshoot, and optimize detection components.
• Interact with databases to extract, transform, query, and process security-related data.
• Validate detection use cases through technical testing, troubleshooting, and performance optimization.
• Ensure the reliability, scalability, and maintainability of deployed detection capabilities.
• Collaborate with security architects, infrastructure engineers, and other technical teams to facilitate integrations.
• Document integration procedures, technical configurations, and deployment processes.
• Design and develop new security detection use cases based on identified security requirements.
• Translate detection requirements into technical implementations.
• Contribute to improving existing detection logic and automation capabilities.

Qualifications

• Professional Qualifications
• Degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field.
• Minimum 3–5 years of relevant experience in security engineering, systems integration, or technical cybersecurity roles.
• Strong problem-solving and analytical capabilities.
• Ability to work autonomously in complex technical environments.
• Good communication skills and ability to collaborate with multidisciplinary teams.
• Professional proficiency in English.

Required Skills

• Linux: Strong hands-on experience with Linux environments, including administration, troubleshooting, scripting, and system-level operations.
• Databases: Solid knowledge of relational databases, SQL queries, data manipulation, and database integration.
• Python: Strong programming skills for automation, data processing, API integrations, and technical scripting.
• SIEM & Security Monitoring: Good understanding of SIEM architectures, log collection, data pipelines, and security detection mechanisms.
• Data Integration: Experience working with heterogeneous data sources, data transformation, and integration workflows.
• Troubleshooting: Ability to investigate and resolve complex technical integration issues independently.

Preferred Skills

• Understanding of cybersecurity fundamentals, common attack techniques, and detection principles.
• Familiarity with Windows environments and enterprise infrastructure.
• Experience working with APIs and automation tools.
• Good understanding of networking fundamentals and common protocols.
• Knowledge of version control tools such as Git.
• Experience with SIEM platforms such as Elastic Security or Splunk.
• Knowledge of ETL tools and data processing frameworks.
• Experience with Ansible, Bash, or PowerShell.
• Familiarity with MITRE ATT&CK and security detection engineering methodologies.
• Experience with large-scale log processing and data analytics environments.
• Previous experience in financial services or highly regulated environments.

About the Company

Why Join act digital Canada?

At act digital, you will contribute to challenging cybersecurity engineering projects within major organizations while benefiting from the expertise of an international cybersecurity team.

We value technical expertise, autonomy, continuous learning, and engineering excellence.Interested? Apply directly through LinkedIn to discuss this opportunity with our team.