RemoteLeaf Logo
Log in Sign up

Lead Incident Security Responder

2 months, 3 weeks ago
Canada
Full-time
Lead
Security Engineer
Cybersecurity
AWS Azure DevSecOps GCP JIRA LLM
Apply Now
Black Duck Inn

Black Duck Inn

Black Duck Inn provides application security testing tools and services designed to help organizations build high-quality, secure software, and is recognized as a leader in the AppSec industry by Gartner and Forrester.

Internet Software & Services
1K-5K
Founded 2002
$2M raised
View All Jobs 4

Description

  • Partner with engineering teams on architecture reviews, threat models, and security design feedback for Black Duck products.
  • Support the secure development lifecycle across SCA, SAST, secret scanning, dependency hygiene, and build pipeline security.
  • Triage internal and externally reported product vulnerabilities and help drive remediation with engineering teams.
  • Coordinate vulnerability fixes and support customer-facing communications when needed.
  • Handle customer security questionnaires, audit requests, and ad hoc product security questions.
  • Draft technically accurate responses to customer security inquiries and gather supporting evidence from engineering.
  • Join customer security calls as a subject matter expert and contribute reusable responses to the knowledge base.
  • Support detection engineering and incident response activities, especially where they intersect with product security risks.
  • Maintain and tune detection content in CrowdStrike NG-SIEM and Sumo Logic and help resolve MDR escalations.
  • Contribute to SOAR automations, runbooks, project tracking in Jira, vendor evaluations, documentation, and mentoring of less experienced team members.

Requirements

  • 7–8 years of applicable experience in product security, application security, or security engineering.
  • Hands-on depth in at least two areas: secure SDLC, threat modeling, secure code review, vulnerability management, product incident response, or customer-facing product security work.
  • Working knowledge of application security tooling, including SCA, SAST, DAST, and secret scanning.
  • Familiarity with at least one major cloud platform from a security perspective: AWS, Azure, or GCP.
  • Awareness of AI and LLM security risks, including prompt injection, sensitive data exposure, and the OWASP Top 10 for LLM Applications.
  • Ability to work independently under general guidance and lead workstreams or small project teams without formal direct-report authority.
  • Practical use of AI and LLM tools to accelerate security work, with sound judgment on when human validation is required.
  • Strong written and verbal communication skills and the ability to explain technical topics to technical and non-technical stakeholders.
  • Bachelor’s degree in Computer Science, Information Security, Information Technology, or equivalent practical experience.
  • Experience contributing to a PSIRT or equivalent product vulnerability response process (preferred).
  • Familiarity with CVSS, embargo handling, and coordinated disclosure (preferred).
  • Industry certifications such as CISSP, CSSLP, GWAPT, GPEN, OSCP, OSWE, or cloud security equivalents are a plus.
  • Experience supporting customer security questionnaires, RFPs, or third-party risk assessments (preferred).

Benefits

  • Pay range of CAD $100,000 to $150,000.
  • Equal opportunity employer with reasonable accommodations for individuals with disabilities.
  • General office environment with standard computer-based work.
  • Occasional travel may be required.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Nooks

Cybersecurity Engineer

Nooks 1-10 Professional Services

Nooks is seeking a hands-on Cybersecurity Engineer to own and strengthen the company’s unclassified environment, maintaining NIST SP 800-171 and CMMC Level 2 compliance and audit readiness across its facilities.

United States Full-time Senior Security Engineer
$145k-$163k
Cybersecurity
4 hours, 57 minutes ago
Dijital Team

Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

Dijital Team 11-50 Internet Software & Services

A Senior Microsoft Engineer (Level 3) will serve as a technical authority for a managed IT services provider, resolving complex issues and improving the security, reliability, and efficiency of multi-tenant Microsoft cloud environments for commercial customers.

Sri Lanka Full-time Senior Cloud Engineer Security Engineer
Azure Cybersecurity PowerShell
5 hours, 12 minutes ago
Jobandtalent

HQ - Lead Information Security Engineer

Jobandtalent 1K-5K Professional Services

Job&Talent is seeking a Lead Information Security Engineer to lead a team of four and strengthen incident response, threat detection, cloud security, and security operations for its global AI-powered workforce platform.

Spain Full-time Lead Security Engineer
AWS Azure CI/CD SIEM
5 hours, 12 minutes ago
ITHAKA

Platform Security Engineer

ITHAKA 251-1K Diversified Consumer Services

ITHAKA is seeking a Platform Security Engineer to mature its DevOps practices into DevSecOps by integrating security automation, tooling, and secure-by-default workflows across software delivery and infrastructure.

United States Full-time Mid Level Security Engineer
$110k-$120k
AWS CI/CD DevSecOps
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers