Find work in Canada.

332,537 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 6 mins ago
Senior Manager, Talent Attraction - Advisory (Risk Services & Deal Advisory)
KPMG
AB · Winnipeg, MB · Saint John, NB · Fredericton, NB · Moncton, NB · Sudbury, ON · Hamilton, ON · Kingston, ON · North Bay, ON · London, ON · Toronto, ON · Windsor, ON · Ottawa, ON · Oakville, ON · Kitchener, ON · Vaughan, ON · Waterloo, ON · Perth, ON · St. Catharines, ON · Mont-Royal, QC · Montreal, QC · Brossard, QC · Joliette, QC · Terrebonne, QC · Quebec, QC · Saint-Eustache, QC · Swift Current, SK · Regina, SK · Langley (District), BC · Prince George, BC · Victoria, BC · Chilliwack, BC · Abbotsford, BC · Vernon, BC · Kamloops, BC · Burnaby, BC · Vancouver, BC · Quesnel, BC · Kelowna, BC · Halifax, NS · St. John's, NL · Calgary, AB · Lethbridge, AB · ON · Kanata, Ontario · Edmonton, Alberta · Langley, British Columbia · Mount Royal, Quebec · Saint-Laurent, Quebec
Full-time
The Advisory team is seeking a Senior Manager, Talent Attraction, to lead talent attraction strategy and delivery for Advisory (Risk Services and Deal Advisory). Reporting to the Director,…
Added 6 mins ago
Senior / Staff ML Ops Engineer
Waabi
Toronto, ON
$184,000 to $272,000 USD / year
Full-time
Shape the developer-facing surface - CLIs, SDKs, job submission, templates, paved paths - designed with the teams who'll use them. Make the common case one command and keep the uncommon…
Added 6 mins ago
Finance Business Partner
Trackforce
Montreal, QC
Full-time
· Proven ability to influence senior stakeholders through strong business acumen and communication skills.
Added 6 mins ago
Software Development Engineer in Test
Magnet Forensics
Canada
Full-time
You will work closely with Engineers, Product Managers, and Senior Quality Leaders to ensure quality is built in early and continuously, not added at the end.
Added 20 mins ago
Digital Transformation Manager
Flexstaf I.T. Inc.
Toronto, ON · Greater Toronto Area, Canada
Full-time
Strong stakeholder and client management skills, including interaction with senior leadership.
Added 20 mins ago
Senior Account Manager, Social & Influencer
North Strategic
Toronto, ON
$80,000 to $90,000 CAD / year
Full-time
As a Senior Account Manager, Social Media and Influencer, your job is to partner with clients to relentlessly pursue innovative creative thinking in the creator space, with a focus on…
Added 21 mins ago
Operations Manager, Student Transportation, Grey Bruce (Hanover)
Voyago
Hanover, ON
Full-time
Provide precise and prompt reporting to senior leadership.
Added 21 mins ago
Group Account Director (Medical Affairs)
Real Chemistry
Canada
As a Group Account Director, you will serve as the senior strategic leader across multiple medical affairs and publication workstreams. You’ll own client relationships at the highest level,…
Added 21 mins ago
Senior Manager, Financial Accounting Advisory Services - FSO - Banking/Insurance/WAM
EY
Toronto, ON
As a FAAS – FSO Senior Manager, you will actively establish, maintain and strengthen internal and external relationships. You will help to develop and expand long-term client relationships…
Added 21 mins ago
Manager, Internal Audit & Risk Management
Mattamy Homes
Toronto, ON
Full-time
Excellent verbal and written communication skills, with the ability to interact effectively with senior leadership and cross-functional teams.
Added 21 mins ago
Lead, Partnerships
Bond Brand Loyalty
Toronto, ON
$90,000 to $110,000 CAD / year
…implementation. You will influence matrixed, cross-functional teams and senior client stakeholders to drive measurable growth. You’ll lead business development efforts for clients, develop…
Added 21 mins ago
Senior Account Manager, Social Media and Influencer
Publicis Groupe Holdings B.V
Toronto, ON
Full-time
As a Senior Account Manager, Social Media and Influencer, your job is to partner with clients to relentlessly pursue innovative creative thinking in the creator space, with a focus on…
Added 36 mins ago
PMT Internship - Summer 2027
''
Florenceville-Bristol, NB
$23 to $26 CAD / hour
Full-time · Temporary
…critical manufacturing operations. By collaborating closely with senior experts, participants learn essential processes, procedures, and industry standards fundamental to effective…
Added 36 mins ago
Senior HR Business Partner
Behavox
Montreal, QC
The Senior HR Business Partner is an individual contributor responsible for partnering with US and Canada business leaders to execute people strategies that support organizational…
Added 36 mins ago
Senior HR Business Partner
Behavox
Toronto, ON
The Senior HR Business Partner is an individual contributor responsible for partnering with US and Canada business leaders to execute people strategies that support organizational…
Added 50 mins ago
CTO | VC-backed AI | Relocate to Barcelona | €120–150k + equity
Ink
Toronto, ON
Full-time
Then Bert leaves the day-to-day and remains an advisor and mentor. Other senior technical leaders around Ink are available for mentorship too.
Added 50 mins ago
Project Technologist
Pinchin Canada
Hamilton, ON
Full-time
…compliance. This role works closely with Project Managers and senior technical staff to deliver Phase I and Phase II Environmental Site Assessments (ESAs), Excess Soil planning documents,…
Added 50 mins ago
Operations Manager, Student Transportation, Grey Bruce (Hanover)
Transdev Ontario Manitoba
Hanover, ON
Full-time
Provide precise and prompt reporting to senior leadership
Added 50 mins ago
Digital Architect (GOAPRDJP00000987) – 5 Resources
Amyantek
Canada
Contract
8 years experience as a data architect, software architect, or senior data engineer, where the proposed resource’s focus has been collaborative work on and/or with cross-functional teams to…
Added 50 mins ago
Customer Success Manager - Contract (Procurement)
Euna Solutions
Oakville, ON
Full-time
Collaborate with senior Customer Success Managers and cross-functional teams, including sales, marketing, and product development, to ensure customers receive exceptional service.
Added 50 mins ago
Senior Software Engineer, Fullstack
Okta
Toronto, ON
$136,000 to $187,000 CAD / year
Full-time
Added 50 mins ago
Senior Software Engineer – DevTest / QA Automation
EngRadar
Toronto, ON
Full-time
Kaseya is seeking a Senior Software Engineer – DevTest / QA Automation to design, build, and maintain robust automated testing capabilities across enterprise software platforms.
Added 50 mins ago
Senior Account Manager
Laurentian Bank
Quebec, QC
Full-time
Added 50 mins ago
Front Line Manager – Property Claims
Aviva Canada
Calgary, AB
Full-time
You will lead the day-to-day operation and development of a team of frontline claims handlers and report to one of our Senior Leaders in a role that requires a unique mix of technical…
Added 50 mins ago
Customer Success Manager (Procurement)
Euna Solutions
Oakville, ON
Full-time
Collaborate with senior Customer Success Managers and cross-functional teams, including sales, marketing, and product development, to ensure customers receive exceptional service.

Senior Security Operations Analyst - Microsoft Sentinel and Defender

Toronto, ON, M5H 0B3, Canada
London, ON, N6A 5S7, Canada
Vancouver, BC, V6E 4E5, Canada
Victoria, BC, V8W 2B7, Canada
Edmonton, AB, T5H 0E7, Canada
Ottawa, ON, K1P 6B9, Canada
ON, Canada
AB, Canada
Waterloo, ON, N2L 0J6, Canada
Calgary, AB, T2P 1M4, Canada

Apply by: Dec 25, 2026
Experience: Typically, 5+ years of cybersecurity experience, including substantial recent experience in security operations and incident investigation.
Posting language: English
Posted: Sep 23, 2026

Apply About employer

Applications open in a new tab.

Original job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

EY is seeking a senior, hands-on security operations analyst to support Managed Detection and Response services in a multi-customer Managed Security Service Provider environment.

You will lead complex security incident investigations using Microsoft Sentinel and Microsoft Defender XDR, perform threat hunting and detection tuning, and improve response workflows through Microsoft Sentinel automation rules, playbooks, and Azure Logic Apps. You will work across multiple customer environments, provide technical guidance to other analysts, and communicate clear findings and response recommendations to clients.

The successful candidate will bring strong investigative judgement, advanced Microsoft security platform experience, and the ability to manage concurrent incidents and priorities in a client-facing environment.

This job posting relates to an existing vacancy within our organization.

Your key responsibilities:

As a senior technical member of the security operations team, you will:

Security incident investigation and response

Lead the triage and investigation of complex or high-severity security incidents across multiple customer environments.
Correlate endpoint, identity, email, cloud, network, and threat intelligence evidence to determine incident scope, root cause, and business impact.
Develop investigation timelines, document evidence, identify attacker activity, and recommend containment and remediation actions.
Coordinate escalations and response activities with clients, internal teams, and other technical specialists.
Produce clear incident records, client communications, and post-incident findings.

Microsoft Sentinel and Defender operations

Use Microsoft Sentinel and Microsoft Defender XDR to investigate, prioritize, and respond to security alerts and incidents.
Investigate activity across Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Defender for Cloud.
Write and optimize Kusto Query Language queries for incident investigation, threat hunting, reporting, and detection validation.
Review and tune analytics rules, hunting queries, workbooks, watchlists, parsers, and related detection content.
Identify gaps in telemetry, detection coverage, and platform configuration, then recommend practical improvements.

Automation and continuous improvement

Design, build, test, and maintain Microsoft Sentinel automation rules and playbooks using Azure Logic Apps.
Automate incident enrichment, triage, notification, ticketing, evidence collection, and approved containment actions.
Troubleshoot playbook failures, integration issues, permissions, API connections, and workflow reliability.
Improve analyst workflows and standard operating procedures based on incident lessons, recurring alert patterns, and service metrics.
Apply appropriate approvals, access controls, logging, and error handling to automated response actions.

MSSP service delivery

Manage investigations and technical priorities across multiple customers with different environments, procedures, and service commitments.
Follow customer-specific rules of engagement, escalation paths, response procedures, and service-level requirements.
Work directly with client security and technology teams to gather context, explain findings, and recommend next steps.
Support onboarding and operational improvement of customer environments, including data connectors, telemetry validation, and incident workflows.
Provide technical coaching and peer review to other analysts without direct people-management responsibility.

Skills and attributes for success

Senior-level experience investigating complex cybersecurity incidents in a Security Operations Centre, Managed Detection and Response, or incident response environment.
Strong hands-on experience with Microsoft Sentinel and Microsoft Defender XDR in production environments.
Experience supporting multiple customers in an MSSP or MDR environment is strongly preferred.
Advanced Kusto Query Language skills for investigation, threat hunting, detection development, and reporting.
Hands-on experience creating and maintaining Microsoft Sentinel analytics rules, hunting queries, workbooks, automation rules, and playbooks.
Hands-on experience building Azure Logic Apps for security orchestration and response, including connectors, APIs, authentication, permissions, error handling, and monitoring.
Experience investigating endpoint, identity, email, cloud, and network threats using Microsoft and third-party telemetry.
Strong understanding of incident response, threat hunting, detection engineering, threat intelligence, and MITRE ATT&CK.
Ability to manage concurrent investigations and priorities while maintaining clear documentation and timely client communication.
Ability to explain technical findings, risk, and response recommendations to both technical and non-technical stakeholders.
Sound judgement when working under pressure and handling high-severity incidents.

To qualify for the role you must have

Typically, 5+ years of cybersecurity experience, including substantial recent experience in security operations and incident investigation.
Bachelor’s degree or diploma in cybersecurity, computer science, information technology, engineering, or a related discipline, or equivalent practical experience.
Experience in a client-facing MSSP, MDR, consulting, or enterprise security operations role.
Microsoft Certified: Security Operations Analyst Associate, SC-200, is preferred.
Azure, Microsoft security, incident response, digital forensics, or cloud security certifications are considered assets.
Experience with ServiceNow or another IT service management platform is considered an asset.
Experience with source control, infrastructure as code, CI/CD, or automated deployment of Microsoft Sentinel content is considered an asset.
Experience with Azure Lighthouse, Microsoft Entra B2B, or other multi-tenant access models is considered an asset.

What working at EY offers

What we look for

We look for individuals who take initiative, demonstrate strong technical judgment, and show the ability to lead through influence. If you thrive in collaborative environments and are passionate about improving operational efficiency, this role is an excellent fit.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you to decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

Support and coaching from some of the most engaging colleagues in the industry
Learning opportunities to develop new skills and progress your career
The freedom and flexibility to handle your role in a way that’s right for you

EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.

Toronto/London/Ottawa/Waterloo/Vancouver/Victoria/ Calgary/ Edmonton: $90,500 to $126,000

Are you ready to shape your future with confidence? Apply today.

To help create the best experience during the recruitment process, please describe any accommodations you may need.

Inclusiveness at EY

Inclusiveness is at the heart of who we are and how we work. We’re committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting our neuroinclusion and accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

Learn about our commitment to Inclusiveness at https://www.ey.com/en_ca/about-us/corporate-responsibility/equity

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with ethical principles and regulatory requirements.

To all recruitment agencies: EY does not accept unsolicited resumes from recruitment agencies. Any resumes submitted without a prior agreement or request from our hiring team will not be considered. EY is not responsible for any fees related to unsolicited resumes.

Apply About employer

More about this job

Responsibilities

The analyst will lead complex security incident investigations and threat hunting activities across multiple customer environments using Microsoft Sentinel and Defender. They will also design and maintain automation playbooks to improve response workflows and provide technical guidance to the security operations team.

Requirements

Candidates must have at least 5 years of cybersecurity experience with hands-on expertise in Microsoft Sentinel and Defender XDR. A bachelor's degree in a related field is required, and professional certifications such as SC-200 are preferred.

Skills

Microsoft Sentinel
Microsoft Defender XDR
Kusto Query Language
Incident investigation
Threat hunting
Azure Logic Apps
Security operations
Detection engineering
Incident response
Cloud security
MSSP
MDR
MITRE ATT&CK
Automation
Technical coaching

Benefits

Discretionary bonus program
Medical coverage
Prescription drug coverage
Dental coverage
Vacation policy
Paid personal days
Professional coaching
Learning opportunities

Visa sponsorship

Not detected in the job text

Keywords

Microsoft Sentinel
Microsoft Defender XDR
Kusto Query Language
Azure Logic Apps
Incident Response
Threat Hunting
MSSP
MDR
Cybersecurity
Cloud Security
Automation
Playbooks
MITRE ATT&CK
ServiceNow
Azure Lighthouse
Microsoft Entra
Detection Engineering
Endpoint Security
Identity Security
Threat Intelligence
SC-200
Security Operations Centre
Telemetry
API
Infrastructure as Code
CI/CD
Data Connectors
Risk Management
Consulting
Technical Coaching

Report this job