Detection Engineer

Address:

Are you passionate about threat detection, attack simulation, and building innovative security solutions? Do you thrive in a high-impact environment where your expertise in researching and developing detections will reduce risk and protect the company and our customers? If so, this role is for you.

Why Join Us?

• Innovate & Evolve – Work alongside penetration testers, threat hunters, and security engineers to develop cutting-edge detections that stay ahead of evolving threats. Your ideas will directly shape our security strategy.

• Challenge the Status Quo – Identify gaps in security detection, hunt down new attack methods, and propose real-world solutions that make an impact.

• 100% Remote – Work From Anywhere – Join a collaborative, high-performing team from anywhere in the world. We value results over location, giving you the flexibility to work how you work best.

• Make a Real Impact – Whether you’re mentoring others, refining security objectives, or leading use case development, your expertise will drive key security decisions. Your voice matters.

What You’ll Bring:

• Min of 3+ years of Splunk experience – Experience with writing advanced queries in Splunk, correlate events, and visualize attack trends.

• Min of 3+ years of network principles & network forensics, as well as detection engineering in a large scale enterprise environment.

• Coding & Automation Skills – Proficiency in Python, Rust, or C# to develop custom security detections.

• Problem-Solver Mentality – A passion for hunting down new threats, identifying gaps, and proposing solutions.

• Strong written and verbal communication & Leadership– Ability to mentor, collaborate, and communicate technical concepts effectively.

Ready to Make an Impact?

If you’re looking for a high-growth, hands-on security role where you can apply your expertise in detection research & engineering, we’d love to hear from you!

This role is 100% REMOTE

Monitors, restores service, changes, supports and handles day-to-day activities 7/24/365 required to run the mission critical Information Security systems for BMO. Provides responsive customer service in support of cyber security.

• Builds effective relationships with internal/external stakeholders.
• Anticipates and reduces complexity for others.
• Prepares and delivers presentations for senior management.
• Provides input into the planning and implementation of operational programs.
• Develops and documents procedures and processes, conforming to the industry best practices and Bank’s security regulations, policies and standards.
• Leads the preparation of end user reference materials.
• Gathers requirements and documents these requirements for use in various audits, reports, & projects.
• Acts in a larger project planning capacity, audits the quality of reports submitted by analysts and provides related coaching and support.
• Performs governance and oversight in support of the team, by producing and reviewing reports to ensure completeness and compliance to applicable standards.
• Monitors & maintains security tools and applications.
• Creates activity reports for security tools and applications.
• Collaborates with internal and external stakeholders in order to deliver on business objectives and to support operational activities for Information Security.
• Develops an understanding of organizational interactions and complexity to engage with the appropriate matrix areas.
• Actions service requests, transactions, queries etc. within relevant service level agreements.
• Coordinates and facilitates incident management activities. Includes deploying changes to the production environment and engaging 2rd party providers contracted to the Bank during an incident.
• Recommends approaches or changes to streamline and integrates security processes and systems in the organization, while considering Information Security methodology to improve overall efficiency.
• Provides technical Information Security subject matter expertise.
• Identifies opportunities to strengthen the capability of the Information Security organization at BMO, such as: sharing expertise to promote technical development and mentoring employees.
• Stays abreast of industry technical and business trends through participation in professional associations, practice communities and individual learning.
• Ensures consistent, high quality practices/work and the achievement of business results in alignment with business/group strategies and with productivity goals.
• Focus is primarily on business/group within BMO; may have broader, enterprise-wide focus.
• Provides specialized consulting, analytical and technical support.
• Exercises judgment to identify, diagnose, and solve problems within given rules.
• Works independently and regularly handles non-routine situations.
• Broader work or accountabilities may be assigned as needed.

  Qualifications:

• Typically between 4 - 7 years of relevant experience and post-secondary degree in in Business or Computer Science, or a related field of study or an equivalent combination of formal training, or industry / technical certifications or work experience.
• Has at least one certification in a related field, with strong preference for Information Security certifications from a well-recognized institution (e.g. (ISC)2, ISACA, SANS).
• Understanding and problem solving ability of IS issues within their business group, appreciating the scope of complexity that exists in the operating environment and the ways which security platforms impact that environment - In-depth.
• Experience in Information Security or with multiple areas of systems and computer operations (e.g. Identity & Access Management, IT operations, Certification & Key Management, Security Platform Administration, Security Incident Response)
• Understanding and problem solving ability of information security issues within their business group - In-depth.
• Partnering, communication, and negotiation skills to communicate effectively within the team and with technology and business partners - In-depth.
• Understands the scope of complexity that exists in the operating environment and the ways which security platforms impact that environment.
• Knowledge of Information Security support and operations concepts, practices, concepts, and technology obtained through formal training and work experience.
• Knowledge of Information Security processes, procedures and controls - In-depth.
• Knowledge of the technical and business environment and the corporate processes and procedures - In-depth.
• Understanding of Information Security risk and regulatory requirements.
• Deep knowledge and technical proficiency gained through extensive education and business experience.
• Verbal & written communication skills - In-depth.
• Collaboration & team skills - In-depth.
• Analytical and problem solving skills - In-depth.
• Influence skills - In-depth.
• Data driven decision making - In-depth.

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

About Us

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.