SIEM Specialist

Company Description

Wepoint is the architect of major transformations for businesses and public sector organizations.

We support our clients from strategy through technological implementation, always striving to think beyond the obvious and to act within the framework of Economic, Social, Environmental, and Technological Responsibility (RESET). Our goal is to create new ways of working, new economic models, and smarter environments.

In nearly 20 years, we have become one of the key players in digital transformation, employing 3,500 people across Europe, Tunisia, North America, and the Asia-Pacific region.

What We Are Looking For

COURAGE – AUTHENTICITY – OPENNESS – COMMITMENT – ELEGANCE

Do these words resonate with you? They are our company values.

At Wepoint, we are looking for committed talents who are ready to share their expertise within open and collaborative teams, and who are not afraid to take initiative. We also value people who are able to challenge themselves and continuously improve.

At the heart of relationships at Wepoint are authenticity and the constant pursuit of excellence for our clients - this is what we expect from our future colleagues.

Job Description

We are looking for a to join our team.

Responsibilities

• Maintain and support the SOAR (Security Orchestration, Automation and Response) platform and related services.
• Ensure the stability, availability, and reliability of the security automation platform and its integrations.
• Manage platform configurations, deployments, and operational maintenance.
• Support the configuration, deployment, and troubleshooting of security automation workflows and use cases.
• Analyze production incidents and resolve technical issues affecting multiple interconnected systems.
• Maintain, configure, and troubleshoot the SOAR platform and its related services.
• Analyze production incidents, platform failures, and integration issues.
• Analyze logs, configurations, execution flows, and Python errors to identify root causes and potential fixes.
• Manage platform deployments, configuration changes, and updates using automation tools and established procedures.
• Resolve issues related to database connectivity, API integrations, authentication, and network communications.
• Identify required network flows and coordinate technical changes with infrastructure and network teams.
• Configure, deploy, troubleshoot, and validate security automation workflows and use cases, including their execution logic.
• Analyze security automation issues and provide technical support during security incidents.
• Document technical findings, identify potential software defects, and escalate issues when necessary.
• Participate in testing, production changes, platform upgrades, and operational support.
• Identify and implement improvements to platform stability, configuration, and operational procedures.
• Maintain technical documentation related to platform configurations, integrations, deployments, and troubleshooting.
• Participate in on-call support rotations, as required.
• Ensure compliance with security policies, operational procedures, and technical standards;
• The Specialist also contributes to the following activities: Technical projects and platform enhancements, Service delivery and operational support activities, Internal and external audits, as required.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or equivalent professional experience.
• 5+ years of experience in Information Technology.
• 3+ years of relevant experience in IT production, infrastructure operations, platform support, or automation environments.
• Strong experience troubleshooting Linux-based services and production systems.
• Working knowledge of Python sufficient to read code, analyze errors, and identify potential issues.
• Experience with automated deployments, configuration management, and production change procedures.
• Knowledge of networking, database connectivity, and system integrations.
• Intermediate knowledge of cybersecurity, supported by hands-on experience with security technologies.
• Understanding of security operations, incident response, threat intelligence, and security automation concepts.
• Ability to understand, troubleshoot, and support cybersecurity use cases and automated workflows.
• Familiarity with version control tools such as Git.
• Knowledge of Elasticsearch, MSSQL, Cassandra, Redis, or S3-compatible storage solutions is considered an asset.
• Experience with SOAR platforms, SOC operations, or incident response is considered an asset.
• Relevant technical and cybersecurity certifications are considered assets.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to analyze complex technical issues and work independently.
• Strong communication and collaboration skills.
• Attention to detail and operational rigor.
• Ability to learn and support complex technical environments.
• Ability to prioritize incidents and work effectively under pressure.
• Excellent communication skills in both French and English. English is required, as the position involves communicating with clients and partners located outside Quebec.

Only candidates who are legally authorized to work for any employer in Canada will be considered.

Wepoint Benefits

• Minimum of 3 weeks of vacation starting from the first year;
• Comprehensive group insurance with a generous employer contribution;
• Employer contribution to a group RRSP;
• Full remote work flexibility: Hybrid, Remote, or On-site;
• A warm, bright, and welcoming office offering fresh fruit, coffee, beverages, occasional meals, etc.;
• Annual IT equipment budget;
• A balanced work environment with flexible working hours;
• Career development: training and certifications, online or in-person learning, Wepoint Academy, etc.;
• An international community of experts ready to share their knowledge;
• A company culture focused on individuals’ needs and their belonging to a strong community.

#tech&security

Permis CNESST : AP-2504754, AP-2504755, AR-2504756