It security engineer Jobs in Westmount, QC

*CANDIDATES MUST BE LOCATED IN THE UNITED STATES or CANADA**

About SafelyYou

SafelyYou’s passionate mission is to empower safer, more person-centered care across senior living through world-leading AI, industry-changing hardware, and remote expert clinicians, significantly improving outcomes for residents while increasing peace of mind for families and reducing costs for communities.

Originating in 2015 as the doctoral research of CEO George Netscher—and inspired by his own family's experience with Alzheimer's disease—SafelyYou was spun out of UC Berkeley’s Artificial Intelligence Research Lab, one of the top five AI research groups in the world. And today, our company is solving critical challenges in senior living, from resident falls and ER visits to staffing concerns, length of stay, and NOI. All helping ensure that communities can focus on improved care for residents while still reaching their financial goals.

SafelyYou is one of five most innovative fall technologies referenced in the Senate Falls Report (2019), a winner of the McKnight’s Tech Partner of the Year, and has been named to Fortune’s Impact 20 list, which recognizes companies making people’s lives better through innovation.

Your Role at SafelyYou
As the SecOps Engineer, you will be a key technical executor and operational anchor within the Security Operations function of the Enterprise Information Technology (EIT) department. This role is designed for a high-level individual contributor who owns the technical execution, systems hardening, and lifecycle management of our internal platforms.

About the Function: This position is being established to drive systemic maturity across our infrastructure. By taking ownership of application onboarding, systems administration, and infrastructure hardening, you will establish a resilient baseline that allows our security function to proactively scale and maintain strong operational rigor.

Our Stack: You'll be operating primarily within an AWS cloud environment and Google Workspace, alongside a modern toolchain spanning infrastructure-as-code for provisioning and change management, identity and access management across enterprise and customer-facing systems, continuous compliance and audit automation, and an observability stack for logging, monitoring, and alerting. This list is illustrative rather than exhaustive — as we scale, there's real opportunity to help evaluate and lead new tooling in growth areas.

Key Responsibilities:

• Security Project Management: Act as the primary internal technical lead for upcoming third-party security assessments and external vulnerability testing, driving vendor coordination, timeline management, and remediation tracking.

• SIEM & Log Analysis Architecture: Lead the design, implementation, and ongoing management of our Security Information and Event Management (SIEM) capability. Establish robust log analysis pipelines to ensure comprehensive visibility into environment logs and system telemetry.

• AI & Automation Integration: Leverage modern AI tools and automation frameworks to streamline incident detection, reduce false positives, and automate routine operational tasks, maximizing the efficiency of our security infrastructure.

• Threat Intelligence & Dissemination: Contribute to the meaningful development of a proactive threat intelligence review process. Keep the EIT team informed on relevant, emerging security trends and distill this data into actionable guidance for other teams across the company.

• Secure Provisioning & Hardening: Own the initial setup, secure configuration, and baseline hardening of new infrastructure, applications, and corporate systems across the enterprise.

• Operational Turnover & Documentation: Develop clean, repeatable documentation and runbooks to seamlessly transition newly hardened systems over to the Support team for day-to-day maintenance, eliminating single points of failure.

• Operational Systems Engineering: Manage high-level systems work, application onboarding, and lifecycle ownership within EIT to maintain continuous attack surface visibility.

• Cross-Functional Collaboration: Partner closely with the IT Support lane to establish seamless handover workflows, share threat intelligence, and collaborate on routine incident response procedures to ensure enterprise-wide operational resilience.

• DevOps Escalation Triage: Serve as the first point of contact for security-related findings and requests currently escalated ad hoc into DevOps (Shared Services/R&D) tickets. Own initial triage, resolve what can be resolved within SecOps, and only forward to DevOps what genuinely requires their ownership — reducing the unpredictable inbound load this creates for that team today.

Definition of Success

• Operational Continuity: Success is defined by your ability to streamline systemic workflows, allowing the proactive security function to operate efficiently without operational bottlenecks.

• Visibility & Telemetry Maturity: Success is measured by the successful deployment of SIEM tooling and the establishment of clear logging standards that reduce our time-to-detection.

• Seamless Handover: Success is measured by the quality of documentation and training provided to the Support team, ensuring zero friction or security gaps when a system is turned over for routine maintenance.

• Project Execution: Success is defined by the timely, structured execution of critical compliance and security initiatives, beginning with our upcoming enterprise assessment schedule.

• DevOps Load Reduction: Success is measured by a reduction in the volume and unpredictability of security-driven tickets landing directly on the DevOps team, with this role established as the first point of triage.

• The Ideal Candidate:
  Systems-First Security Mindset: 6–8 years of experience in Systems Administration, Systems Engineering, or IT Operations, with a proven track record of shifting your career focus into security operations.

• SIEM & Telemetry Expertise: Proven experience configuring SIEM platforms, managing log aggregation, and building effective alerting logic.

• Automation & AI Familiarity: Hands-on experience using automation scripts, tools, or AI-driven capabilities to optimize security operations and workflows.

• Infrastructure Hardening Expertise: Deep technical knowledge of securing cloud environments, network configurations, identity providers (IdP), and enterprise SaaS ecosystems.

• Project & Vendor Management: Proven ability to lead cross-functional technical projects, interface with external third-party security vendors, and translate raw vulnerability data into actionable remediation steps.

• Documentation & Communication Champion: Exceptional ability to break down complex system architectures into clear runbooks, and the communication skills necessary to translate technical threat intel into digestible updates for non-technical company teams.

• Certifications (Plus): Security-focused certifications (e.g., Security+, CEH, GISF) or Cloud/Systems certifications (AWS, Google) are highly valued.
  

Why Join Us? You Can Make a Difference!

Salary Range: $115-130k base USD / $110-125k base CDN depending on experience, plus a bonus plan, stock options and benefits.

SafelyYou offers a competitive compensation package, including but not limited to:

• A mission-driven company culture

• Fully remote

• Competitive salary & benefits, including fully paid employee premiums for Medical, Dental, and Vision

• 401k Program

• Monthly Education, Well-being & WFH stipends

• Non-accrual PTO

• Growth Potential

• Company Retreats

• Medical & Family/Parental Leave

At SafelyYou, we believe that a diverse, equitable, and inclusive workplace makes us a more relevant, competitive, and resilient company. We are committed to creating a diverse and inclusive workforce that celebrates diversity. We do not discriminate based on race, color, ancestry, religion, national origin, sexual orientation, age, citizenship, marital or family status, disability, gender identity or expression, veteran status, or any other legally protected status.

We value all the perspectives our team members bring to the table, and that is why we don’t look for culture fit, but culture add. We want to hear from YOU! We encourage you to apply even if you do not fit 100% of the technical requirements.