{"id":2844771,"url":"https://alion.io/job/visier-staff-information-security-engineer-threat-detection-response","title":"Staff Information Security Engineer - Threat Detection & Response","company":{"id":5492,"name":"Visier","domain":"visier.com","url":"https://alion.io/company/visier-solutions-inc","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vancouver, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":179000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-07-18T00:23:29Z","employer_posted_date":"2026-07-18","last_verified_at":"2026-10-21T12:14:46Z","board_verified":true,"closed_at":null,"days_open":95,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":95},"description":"Visier is the global leader in Workforce Intelligence that powers every people decision. We bring Workforce AI to life for HR departments through our award-winning, agentic AI technology by surfacing the insights leaders need to plan, decide, and act with confidence in the moments that matter most. As the market leader in people analytics, workforce planning, organizational design, and manager effectiveness solutions, we fuel smarter decision-making for organizations across the globe. Our mission is to help businesses lead with insight at scale as they continuously transform.\nFounded in 2010 by the pioneers of business intelligence, we have over 85,000 customers in 75 countries-including enterprises like BASF, Panasonic, Domino’s Pizza, Experian, Amgen, eBay, and Ford Motor Company.\nPosition Overview\nThis senior technical IC role owns Visier’s threat detection and response capabilities end-to-end-driving the overarching strategy, tooling engineering, detection content, and incident response processes. Operating within a high-leverage team, you will scale our security capabilities through advanced engineering and AI, directly safeguarding our multi-cloud platform, corporate identity, and sensitive customer data from sophisticated global threats. Your work will ensure our defensive posture continuously evolves ahead of the threat landscape.\nBring your 8+ years of deep information security expertise, mastery of modern SIEM architectures, and calm incident command experience to a team where you will operate with high autonomy. You will leverage your technical depth to champion engineering-first security practices, safely adopt generative AI workflows, and mentor peers to elevate our collective defense.\nWhat You Will Deliver:\nEnd-to-End Pipeline Resilience: Design and operate a cohesive detection pipeline spanning multi-cloud, SaaS, identity, and endpoint telemetry to eliminate visibility gaps and ensure comprehensive logging infrastructure.\n\nProactive Detection Engineering: Build, test, and tune high-fidelity detections using a modern detection-as-code framework mapped to the MITRE ATT&CK matrix, drastically minimizing false positives while prioritizing critical threat coverage.\n\nIncident Lifecycle Ownership: Author robust playbooks, runbooks, and escalation criteria that define how Visier handles security incidents, ensuring immediate containment during major events.\n\nContinuous Defensive Evolution: Lead blameless post-incident reviews and seamlessly translate post-mortem findings into automated detections and architectural hardening requirements.\n\nCross-Functional Security Integration: Partner closely with software developers, SREs, and offensive security functions to convert emerging vulnerabilities and organization-specific risks into highly targeted defensive rules.\n\nAI-Accelerated Operations: Securely integrate and pioneer the use of Generative AI tools to accelerate detection development, alert triage, telemetry enrichment, and automated responses.\n\nWhat You Will Bring To The Table:\nEducation & Experience: 8+ years of hands-on experience in information security, with a proven track record of designing, owning, and scaling threat detection architectures or major incident response programs.\n\nDetection-as-Code Mastery: Expert-level detection engineering skills utilizing modern SIEM environments (Splunk Enterprise Security preferred) alongside fluent structural mapping to the MITRE ATT&CK framework.\n\nCloud & Infrastructure Fluency: Deep technical experience analyzing and building threat coverages across enterprise multi-cloud environments (AWS, Azure, or GCP), core identity providers, and endpoint/EDR telemetry.\n\nIncident Command Presence: Proven experience acting as an Incident Commander, successfully steering cross-functional technical teams through high-pressure, complex, and high-visibility security incidents.\n\nSecurity Automation & Scripting: Strong hands-on coding proficiency (Python, Go, or Bash) to build resilient automation pipelines, data enrichments, and automated response playbooks.\n\nStrategic Communication: Exceptional ability to translate deeply technical indicators of compromise and complex security risks into clear, high-level business insights for executive stakeholders.\n\nWhat Do We Value:\nYou roll up your sleeves\n\nYou make it easy\n\nYou are proud\n\nYou never stop learning\n\nYou play to win\n\nHow we work & what we offer:\nFixed hybrid work model: 3 days a week in office (Tuesday, Wednesday, Thursday)\n\nModern, pet-friendly downtown office spaces with collaborative areas and an on-site gym\n\nAnnual company All Hands in Vancouver, our entire organization travels to our Vancouver HQ for a week of team building, learning and breakout sessions\n\nCompetitive salary, and top-tier health and wellness benefits\n\nStock options and/or bonus based on your role, location, and employment type\n\nGenerous paid time off, including volunteering days and extra days over the December holidays\n\nThe base pay range for this position in the 130,000 - 170,000 /year + bonus\nBenefits and working arrangements may vary depending on your seniority, location and employment type. The compensation offered will be determined by factors such as relevant qualifications, experience, knowledge and skills. Many of our positions are eligible for additional compensation such as commission or bonus plans. Your Talent Acquisition partner will walk through the details if you interview for the role.\nAI in Hiring\nAs a people analytics company, we think carefully about how AI is used in decisions that affect people, including our own. Our Talent Acquisition team uses AI tools to help review resumes and application responses, so every candidate's application is assessed quickly and consistently against the role's requirements. AI may also assist with scheduling and summarizing interview notes. These tools support our team; they don't replace it. Every hiring decision at Visier is made by a person, not an algorithm.\nHow you prepare is up to you, and there's no issue with using AI as a helpful tool along the way. What matters most to us is that what you share, whether in your application or in conversation with us, reflects your own real experience and skills. We ask that live interviews be AI-free, so we can get to know how you communicate, think through problems, and describe the work you've actually done. We reserve the right to end the interview early if candidate fraud is suspected.\nIf you have questions about how AI is used in our process or how your data is handled, review our Visier Candidate Privacy Notice or reach out to us.","description_format":"text","description_chars":6616,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Stock options"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Operations","HR & Payroll Software"],"lifecycle":[{"event":"open","at":"2026-10-19T10:34:43Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Talent Stream","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.704,"p_room":0.28,"age_days":95,"expected_fill_days":42,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/visier-staff-information-security-engineer-threat-detection-response","json_url":"https://alion.io/job/visier-staff-information-security-engineer-threat-detection-response.json","meta":{"generated_at":"2026-10-21T15:06:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21529,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5492},"rest":"https://alion.io/mcp/rest/get_company?id=5492"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvisier-staff-information-security-engineer-threat-detection-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvisier-staff-information-security-engineer-threat-detection-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvisier-staff-information-security-engineer-threat-detection-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/visier-staff-information-security-engineer-threat-detection-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvisier-staff-information-security-engineer-threat-detection-response"}]}