MONTRÉAL [HYBRID] Security Automation Engineer

WHO WE ARE:

As the founding entity of RAINBOW PARTNERS, Quanteam is a consulting firm specializing in Banking, Finance, and Financial Services. Guided by our core values of closeness, teamwork, diversity, and excellence, our team of 1,000 expert consultants, representing 35 different nationalities, collaborates across 10 international offices: Paris, Lyon, New York, Montreal, London, Brussels, Geneva, Lisbon, Porto and Casablanca.

We are looking for an IT Production - Security Automation Engineer to work with one of our clients.

CONTEXT AND ROLE OBJECTIVES:

The Security Automation Engineer is responsible for:

- Maintaining and supporting the Security Orchestration, Automation and Response (SOAR) platform and its supporting services.

- Ensuring the stability, availability and reliability of the security automation platform and its integrations.

- Managing platform configurations, deployments and operational maintenance.

- Supporting the configuration, deployment and troubleshooting of security automation workflows and use cases.

- Investigating production incidents and resolving technical issues across interconnected systems.

KEY RESPONSIBILITIES:

- Maintain, configure and troubleshoot the SOAR platform and its supporting services.

- Investigate production incidents, platform failures and integration issues.

- Analyze logs, configurations, execution flows and Python errors to identify root causes and potential corrections.

- Manage platform deployments, configuration changes and updates using automation tools and established procedures.

- Troubleshoot database connectivity, API integrations, authentication and network communication issues.

- Identify required network flows and coordinate technical changes with infrastructure and networking teams.

- Configure, deploy, troubleshoot and validate security automation workflows and use cases, including their execution logic.

- Investigate security automation issues and provide technical support during security incidents.

- Document technical findings, identify potential software defects and escalate issues when required.

- Participate in testing, production changes, platform upgrades and operational support.

- Identify and implement improvements to platform stability, configuration and operational procedures.

- Maintain technical documentation covering platform configurations, integrations, deployments and troubleshooting.

- Participate in on-call support rotations as required.

- Ensure compliance with security policies, operational procedures and technical standards.

The engineer also contributes to

- Technical projects and platform improvements.

- Service delivery and operational support activities.

- Internal and external audits when required.

PROFILE:

Mandatory requirements

- Bachelor's degree in computer science, Engineering, Information Technology or equivalent professional experience.

- 5+ years of experience in information technology, including 3+ years of relevant experience in IT production, infrastructure operations, platform support or automation environments.

- Strong knowledge of Linux environments, including service management, configuration, deployment and troubleshooting.

- Strong experience troubleshooting Linux-based services and production systems.

- Experience supporting and troubleshooting distributed platforms involving multiple services, databases and system integrations.

- Experience with automated deployments and configuration management tools, preferably Ansible.

- Experience with automated deployments, configuration management and production change procedures.

- Working knowledge of Python for code analysis, error investigation and debugging, sufficient to read code, investigate errors and identify potential defects.

- Knowledge of SQL and NoSQL databases and backend services.

- Experience with REST APIs, system integrations and authentication mechanisms.

- Good understanding of networking, including TCP/IP, DNS, HTTP/HTTPS, TLS, SSH and network connectivity troubleshooting.

- Knowledge of networking, database connectivity and system integrations.

- Experience with log analysis, monitoring and root-cause investigation.

- Good knowledge of cybersecurity principles, security operations and security infrastructure.

- Intermediate cybersecurity knowledge, supported by practical experience with security technologies.

- Hands-on experience with security technologies such as EDR, antivirus, firewalls, IDS/IPS, WAF or similar solutions.

- Knowledge of SIEM, SOC operations, incident response, threat intelligence and security use cases.

- Understanding of security operations, incident response, threat intelligence and security automation concepts.

- Ability to understand, troubleshoot and support security use cases and automation workflows.

- Familiarity with version control tools such as Git.

Behavioral skills

- Strong analytical, troubleshooting and problem-solving skills.

- Ability to investigate complex technical issues and work independently.

- Good communication and collaboration skills.

- Attention to detail and operational reliability.

- Ability to learn and support complex technical environments.

- Ability to prioritize incidents and work effectively under pressure.

Nice to have

- Experience with SOAR platforms or security automation frameworks.

- Experience with SOAR platforms, SOC operations or incident response.

- Knowledge of Elasticsearch, MSSQL, Cassandra, Redis or S3-compatible storage.

- Relevant technical and security certifications.

Language

- English: Required.

- French: Intermediate or higher.

ENVIRONMENT:

- SOAR, Linux, Ansible, Python, SQL / NoSQL, REST APIs, TCP/IP, DNS, HTTP/HTTPS, TLS, SSH, EDR, antivirus, firewalls, IDS/IPS, WAF, SIEM, Git, Elasticsearch, MSSQL, Cassandra, Redis, S3-compatible storage