Security Operations Team Lead
Safe Software
Safe Software is looking for a Security Operations Team Lead to build and lead our security operations function. This is a new role, and the person in it will own the programs, processes, and people that make security operations work at Safe. We have an immediate opening and are excited to find the right candidate to join our team.
Reporting to the Director of Information Security, you’ll take ownership of the programs on our roadmap — incident response, vulnerability and patch management, system hardening and configuration management, device trust and conditional access, and resiliency planning — and turn them from initiatives into durable, measurable practices. This is also a people‑leadership role: you’ll manage the Security Operations Engineers who deliver that work, starting with a small team and growing it as the function matures.
It’s a leadership role, and a hands‑on one. You’ll stay close enough to the work to make good technical calls, carry a share of the on‑call rotation, and be credible with the engineers you lead. We’re looking for someone with a first stretch of leadership behind them who wants substantially more ownership than they’ve had so far, and the support to grow into it.
You’ll also set the tone for how security shows up at Safe. Security only works when it feels like a partnership rather than an obstacle, and the best security operations leaders we’ve worked with treat other teams as partners with their own pressures and deadlines. That’s the disposition we’re hiring for.
About The TeamInformation Security at Safe protects the data, systems, and people behind FME and the 25,000+ enterprise customers who rely on it. We’re a growing, high‑trust team that partners closely with teams across Safe rather than operating as a separate gate.
We’re at a genuinely interesting period of growth and opportunity: we’re building programs, not just maintaining them. Incident response, resiliency planning, configuration management, and vulnerability management are all being stood up or significantly matured right now, and this role drives much of that work. This means real latitude to decide how security operations should work at Safe.
We also lean on AI and automation to cut toil, sharpen investigations, and move faster. Part of this role is setting both the expectation and the guardrails for how the team experiments with them.
What You’ll Be DoingAs the Security Operations Team Lead, you will:
Build and lead the security operations team, including hiring, onboarding, coaching, performance, and career development. You’ll set the bar for how the team works, then grow the team as the function scales.
Own the incident response program end to end
— the process, the runbooks, the on‑call rotation, the tabletop exercises, and the post‑incident reviews. You’ll act as incident commander for significant events, carry a share of the on‑call rotation, and make sure every incident makes the next one easier.
Own the security operations roadmap and its delivery, translating strategy into prioritized, resourced work with clear outcomes, and reporting on progress, risk, and where you need help.
Drive programs and processes to maturity
— automated patch management, CIS benchmark adoption for system hardening and configuration management, device trust and conditional access, vulnerability management with meaningful SLAs, and resiliency planning.
Set the technical direction for our security tooling, ensuring Rapid7 InsightVM (vulnerability management) and InsightIDR (SIEM), Cisco Secure Endpoint (EDR), Cisco Umbrella, Active Directory, JumpCloud, Google Workspace, and AWS security controls are configured, tuned, and delivering real detection value rather than noise.
Define and track the metrics that matter
— detection and response times, remediation SLAs, hardening and patch coverage, alert quality — and make sure they drive decisions instead of decorating a dashboard.
Champion AI and automation across the team’s workflows, piloting and standardizing tools that reduce toil and sharpen investigations, and establishing sensible guardrails for how AI is used in security work.
Own Security Operations’ contribution to compliance, operating and evidencing controls for ISO 27001, SOC 2, and future frameworks, and building processes where audit evidence falls out of the day‑to‑day work instead of becoming a fire drill.
Partner with IT and teams across Safe
to embed security into how work already gets done, delivering findings constructively and building the kind of trust that gets people calling you early.
Represent Security Operations to leadership, communicating risk, incidents, and program status clearly to both technical and non‑technical audiences.
Qualifications, Skills, and CompetenciesSafers come from a variety of backgrounds with a diversity in skills and knowledge. That said, we find that those who are most successful in this role have experience with the following areas.
Required Skills:
5+ years in security operations, incident response, or a closely related security engineering discipline, including 1–2 years leading a team — as a manager, team lead, or technical lead with formal ownership of others’ work.
Meaningful ownership of a security program — incident response, vulnerability management, hardening, or similar — that you helped take from immature to reliably operating.
Deep hands‑on SIEM and EDR experience: building and tuning detections, running investigations, and improving signal‑to‑noise over time.
Strong incident response background, including leading or coordinating response for significant incidents, running post‑incident reviews, and maintaining runbooks that reflect reality. Familiarity with MITRE ATT&CK.
Practical experience with vulnerability and patch management at scale, and with hardening and configuration management against a recognized standard such as the CIS Benchmarks.
Solid network security knowledge, including protocols and architecture, and how to secure both on‑premises and cloud environments.
Solid cloud security knowledge, ideally AWS: IAM, logging, network controls, and posture management, plus experience securing and administering a cloud productivity suite such as Google Workspace.
Working knowledge of identity and access: SSO, MFA, conditional access, device trust, and least‑privilege design.
Experience supporting or operating controls for ISO 27001, SOC 2, or comparable frameworks, and comfort with the evidence and audit side of the work.
Excellent written and verbal communication, including the ability to explain risk and incidents clearly to leadership and to deliver difficult findings constructively.
Desired Skills / Bonus Points:
Direct experience with our stack: Rapid7 InsightVM and InsightIDR, Google Workspace security and admin, Active Directory, AWS, Cisco Umbrella, and Cisco Secure Endpoint.
Experience standing up or significantly maturing an incident response program, including on‑call design and tabletop exercises.
Demonstrated experience building AI or automation into security operations, and a point of view on how to do it safely.
Experience with business continuity, disaster recovery, or resiliency planning.
Experience hiring, growing, and developing a technical team from a small base.
Scripting or development skills (Python, PowerShell, or similar) sufficient to build and review automation.
Relevant certifications or a plan to complete certifications such as CISSP, CISM, GIAC, or equivalent.
A Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
If you don’t meet every single qualification but are excited about this role, we’d still love to hear from you.
What You Can ExpectWhen you choose a career with Safe Software, you’re also choosing…
Meaningful Work:
Make a profound impact across our business, workplace and data integration product.
A Supportive Environment:
Feel empowered to share your ideas and implement them with high autonomy and team support.
Social Responsibility:
Become part of a team that finds meaningful ways to give back. Take paid time off to volunteer for one of our Safe‑organized opportunities that align with our core community initiatives.
Learning & Career Development:
We believe in your continuous learning and growth. Take advantage of an annual learning budget and training programs paid for by Safe.
Flexible Working Hours:
Flexible and remote‑friendly work arrangements to fit your lifestyle. Work when you want, and how you want to.
Work-Life Balance:
There’s no place for burnout at Safe. Maintain a healthy balance of your personal and work life without splitting yourself in two. Enjoy 3 weeks of vacation to recharge, plus an additional paid 6 seasonal days off per year.
Health & Wellness:
Extended health, dental, health or lifestyle spending, and counseling benefits from day 1. That’s right, no waiting period.
Family is important:
We are dedicated to supporting our employees through parenthood and offer a Parental Leave Top‑Up Program for new parents through childbirth or adoption.
Shared Success:
Share in Safe’s success with our bi‑annual profit sharing and RRSP/TFSA matching program.
An Accessible Commute:
Regardless of your commute method, we’re located close to public transit, and provide complimentary parking and bike storage for our team!
About Safe SoftwareSafe Software transforms organizations with FME, the only All‑Data Any‑AI Enterprise Integration Platform connecting all your data, anywhere, at any velocity.
With over 30 years of expertise and 25,000+ enterprise customers across 125+ countries, we simplify your data journey, wherever it leads.
Founded in 1993, Safe is headquartered in Surrey, BC with over 300 team members and counting. We’re always looking for talented individuals with diverse backgrounds who are determined to learn and grow. Are you ready to join the team?
Our Commitment to Diversity and InclusionSafe Software is an equal opportunity employer and we truly believe that innovation and strength begin with diversity and inclusion.
We welcome all candidates regardless of race, gender identity or expression, sexual orientation, age, ability, disability, national or ethnic origin, political belief, religion, or family status.
Should you require accommodations during the recruitment process, please contact View email address on ca.hrm.tc.
Notice Regarding Use of Automated Tools in HiringAt Safe Software, we use automated tools to help us process applications and identify qualified candidates. These tools may assist in screening resumes and summarizing interview content based on the information you provide. This helps our team review applications efficiently while ensuring every candidate is considered based on the requirements of the role.
Please be assured that the final hiring decision is always made by a member of our team. For more information on how we protect your privacy, please see our policy. If you have questions about this process, please contact us at View email address on ca.hrm.tc.
#J-18808-Ljbffr
Reporting to the Director of Information Security, you’ll take ownership of the programs on our roadmap — incident response, vulnerability and patch management, system hardening and configuration management, device trust and conditional access, and resiliency planning — and turn them from initiatives into durable, measurable practices. This is also a people‑leadership role: you’ll manage the Security Operations Engineers who deliver that work, starting with a small team and growing it as the function matures.
It’s a leadership role, and a hands‑on one. You’ll stay close enough to the work to make good technical calls, carry a share of the on‑call rotation, and be credible with the engineers you lead. We’re looking for someone with a first stretch of leadership behind them who wants substantially more ownership than they’ve had so far, and the support to grow into it.
You’ll also set the tone for how security shows up at Safe. Security only works when it feels like a partnership rather than an obstacle, and the best security operations leaders we’ve worked with treat other teams as partners with their own pressures and deadlines. That’s the disposition we’re hiring for.
About The TeamInformation Security at Safe protects the data, systems, and people behind FME and the 25,000+ enterprise customers who rely on it. We’re a growing, high‑trust team that partners closely with teams across Safe rather than operating as a separate gate.
We’re at a genuinely interesting period of growth and opportunity: we’re building programs, not just maintaining them. Incident response, resiliency planning, configuration management, and vulnerability management are all being stood up or significantly matured right now, and this role drives much of that work. This means real latitude to decide how security operations should work at Safe.
We also lean on AI and automation to cut toil, sharpen investigations, and move faster. Part of this role is setting both the expectation and the guardrails for how the team experiments with them.
What You’ll Be DoingAs the Security Operations Team Lead, you will:
Build and lead the security operations team, including hiring, onboarding, coaching, performance, and career development. You’ll set the bar for how the team works, then grow the team as the function scales.
Own the incident response program end to end
— the process, the runbooks, the on‑call rotation, the tabletop exercises, and the post‑incident reviews. You’ll act as incident commander for significant events, carry a share of the on‑call rotation, and make sure every incident makes the next one easier.
Own the security operations roadmap and its delivery, translating strategy into prioritized, resourced work with clear outcomes, and reporting on progress, risk, and where you need help.
Drive programs and processes to maturity
— automated patch management, CIS benchmark adoption for system hardening and configuration management, device trust and conditional access, vulnerability management with meaningful SLAs, and resiliency planning.
Set the technical direction for our security tooling, ensuring Rapid7 InsightVM (vulnerability management) and InsightIDR (SIEM), Cisco Secure Endpoint (EDR), Cisco Umbrella, Active Directory, JumpCloud, Google Workspace, and AWS security controls are configured, tuned, and delivering real detection value rather than noise.
Define and track the metrics that matter
— detection and response times, remediation SLAs, hardening and patch coverage, alert quality — and make sure they drive decisions instead of decorating a dashboard.
Champion AI and automation across the team’s workflows, piloting and standardizing tools that reduce toil and sharpen investigations, and establishing sensible guardrails for how AI is used in security work.
Own Security Operations’ contribution to compliance, operating and evidencing controls for ISO 27001, SOC 2, and future frameworks, and building processes where audit evidence falls out of the day‑to‑day work instead of becoming a fire drill.
Partner with IT and teams across Safe
to embed security into how work already gets done, delivering findings constructively and building the kind of trust that gets people calling you early.
Represent Security Operations to leadership, communicating risk, incidents, and program status clearly to both technical and non‑technical audiences.
Qualifications, Skills, and CompetenciesSafers come from a variety of backgrounds with a diversity in skills and knowledge. That said, we find that those who are most successful in this role have experience with the following areas.
Required Skills:
5+ years in security operations, incident response, or a closely related security engineering discipline, including 1–2 years leading a team — as a manager, team lead, or technical lead with formal ownership of others’ work.
Meaningful ownership of a security program — incident response, vulnerability management, hardening, or similar — that you helped take from immature to reliably operating.
Deep hands‑on SIEM and EDR experience: building and tuning detections, running investigations, and improving signal‑to‑noise over time.
Strong incident response background, including leading or coordinating response for significant incidents, running post‑incident reviews, and maintaining runbooks that reflect reality. Familiarity with MITRE ATT&CK.
Practical experience with vulnerability and patch management at scale, and with hardening and configuration management against a recognized standard such as the CIS Benchmarks.
Solid network security knowledge, including protocols and architecture, and how to secure both on‑premises and cloud environments.
Solid cloud security knowledge, ideally AWS: IAM, logging, network controls, and posture management, plus experience securing and administering a cloud productivity suite such as Google Workspace.
Working knowledge of identity and access: SSO, MFA, conditional access, device trust, and least‑privilege design.
Experience supporting or operating controls for ISO 27001, SOC 2, or comparable frameworks, and comfort with the evidence and audit side of the work.
Excellent written and verbal communication, including the ability to explain risk and incidents clearly to leadership and to deliver difficult findings constructively.
Desired Skills / Bonus Points:
Direct experience with our stack: Rapid7 InsightVM and InsightIDR, Google Workspace security and admin, Active Directory, AWS, Cisco Umbrella, and Cisco Secure Endpoint.
Experience standing up or significantly maturing an incident response program, including on‑call design and tabletop exercises.
Demonstrated experience building AI or automation into security operations, and a point of view on how to do it safely.
Experience with business continuity, disaster recovery, or resiliency planning.
Experience hiring, growing, and developing a technical team from a small base.
Scripting or development skills (Python, PowerShell, or similar) sufficient to build and review automation.
Relevant certifications or a plan to complete certifications such as CISSP, CISM, GIAC, or equivalent.
A Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
If you don’t meet every single qualification but are excited about this role, we’d still love to hear from you.
What You Can ExpectWhen you choose a career with Safe Software, you’re also choosing…
Meaningful Work:
Make a profound impact across our business, workplace and data integration product.
A Supportive Environment:
Feel empowered to share your ideas and implement them with high autonomy and team support.
Social Responsibility:
Become part of a team that finds meaningful ways to give back. Take paid time off to volunteer for one of our Safe‑organized opportunities that align with our core community initiatives.
Learning & Career Development:
We believe in your continuous learning and growth. Take advantage of an annual learning budget and training programs paid for by Safe.
Flexible Working Hours:
Flexible and remote‑friendly work arrangements to fit your lifestyle. Work when you want, and how you want to.
Work-Life Balance:
There’s no place for burnout at Safe. Maintain a healthy balance of your personal and work life without splitting yourself in two. Enjoy 3 weeks of vacation to recharge, plus an additional paid 6 seasonal days off per year.
Health & Wellness:
Extended health, dental, health or lifestyle spending, and counseling benefits from day 1. That’s right, no waiting period.
Family is important:
We are dedicated to supporting our employees through parenthood and offer a Parental Leave Top‑Up Program for new parents through childbirth or adoption.
Shared Success:
Share in Safe’s success with our bi‑annual profit sharing and RRSP/TFSA matching program.
An Accessible Commute:
Regardless of your commute method, we’re located close to public transit, and provide complimentary parking and bike storage for our team!
About Safe SoftwareSafe Software transforms organizations with FME, the only All‑Data Any‑AI Enterprise Integration Platform connecting all your data, anywhere, at any velocity.
With over 30 years of expertise and 25,000+ enterprise customers across 125+ countries, we simplify your data journey, wherever it leads.
Founded in 1993, Safe is headquartered in Surrey, BC with over 300 team members and counting. We’re always looking for talented individuals with diverse backgrounds who are determined to learn and grow. Are you ready to join the team?
Our Commitment to Diversity and InclusionSafe Software is an equal opportunity employer and we truly believe that innovation and strength begin with diversity and inclusion.
We welcome all candidates regardless of race, gender identity or expression, sexual orientation, age, ability, disability, national or ethnic origin, political belief, religion, or family status.
Should you require accommodations during the recruitment process, please contact View email address on ca.hrm.tc.
Notice Regarding Use of Automated Tools in HiringAt Safe Software, we use automated tools to help us process applications and identify qualified candidates. These tools may assist in screening resumes and summarizing interview content based on the information you provide. This helps our team review applications efficiently while ensuring every candidate is considered based on the requirements of the role.
Please be assured that the final hiring decision is always made by a member of our team. For more information on how we protect your privacy, please see our policy. If you have questions about this process, please contact us at View email address on ca.hrm.tc.
#J-18808-Ljbffr
Vacancy posted 1 hour ago
Similar jobs that could be interesting for youBased on the Security Operations Team Lead in Winnipeg, MB vacancy
- ...POSITION TITLE: Team Lead INTERNAL CLOSING DATE: November 6, 2026 LOCATIONS:... ...be responsible for ensuring the efficient operation and functionality of the operations in conjunction... ...for any service charges incurred. A security check is considered current if it was obtained...SuggestedRemplacementFull timeTemporary workMonday to friday
- ...available. All members of our team are encouraged to ‘spread their... ...WE’RE LOOKING FOR? The Team Lead links the leadership team and... ...associates by assisting in the operational functions of the store, and... ...increased productivity and improved operations of the store; Assist...SuggestedPermanent employmentFull timeShift work
- ...Wealthsimple, Canada’s leading financial innovator, seeks a Team Lead, CXO Risk & Security to guide a frontline squad of 6–12 specialists at the intersection of Client Experience, Platform Security, and Risk Operations. You’ll protect client assets, de-escalate high-stakes...Suggested
- ...love Wealthsimple is Canada’s leading financial innovator. The... ...company was founded in 2014 by a team of financial experts and technology... ....As Team Lead, CXO Risk & Security, you will lead a frontline... ..., Platform Security, and Risk Operations. You are accountable for protecting...Suggested
- ...clients and improve the overall transportation experience. Join our team and help us keep communities connected. Our Manitoba... ...We are currently seeking applications for a Construction Team Lead; the role combines technical leadership, project delivery, business...SuggestedFor contractors
- ...every step, personal accountability, one team and active learning, we deliver the critical... ...and Planning processes Take a lead role in working with our customers to determine... ...energy across North America. Our field operations span seven Canadian provinces, 34 U.S. states...Work at officeFlexible hours
- ...Industries Limited, North America’s leading manufacturer and distributor... ...have made Price a market leader in supplying air distribution,... ...challenges, and working in a friendly, team-driven environment, you should... ...and maintain work cell, operations and routing information in ERP...For contractorsWork at office
- ...safety, quality, and ethics, our experts lead their fields with dedication, a creative spirit... ...and the communities they serve. Join a team that’s naturally committed to the... ...2026. Your Key Responsibilities Daily operational management of 6-12 A&P professionals Communication...Permanent employmentFull timeWork at officeLocal areaWorldwideFlexible hours
- ...Intact is seeking a Team Lead for the Claims Data Analytics Team (CDAT) in Canada. You will guide analytics projects that inform customer experience, operational excellence and financial performance, while coaching team members and coordinating with stakeholders. Role requires...
- Lead warehouse operations in Etobicoke with Purolator, using coaching and communication skills to support safe, efficient daily workflows.The CUS Team Lead oversees day-to-day warehouse operations and guides team members. You will coordinate workload, monitor attendance, provide...
$143.5k - $188.37k per year
...enthusiasm, of inclusion and belonging. As a member of the Long View team, you’ll see how our company’s core pillars - Integrity,... ...great place to work!Do you have the vision and expertise to lead enterprise security architecture, influence business decisions, and help...Permanent employmentWork at officeRelocation- Lead Yardi optimization and property administration at Larlyn Property Management Ltd. during regular Monday-to-Friday business hours... ..., or related post-secondary degreeThree to five years’ property operations experienceFive-plus years’ managerial experienceAdvanced hands-on...Monday to friday
- The Operations (Ops) Team Lead role assists in overseeing day-to-day operations, providing guidance and management where needed to the Drivers. The Ops Lead reports to the Country Manager.Primary Responsibilities: Manage team of Data Collection Driving Operations field resourcesDrives...
- Wealthsimple Inc. is seeking a Team Lead, CXO Risk & Security to guide a frontline squad of CX Specialists in a fast-paced fintech environment. You will protect client assets, de-escalate high-stakes security inquiries, and develop talent across the team. You will partner with...
$21 per hour
...founded in 1960. Our mission is to be a world leader in matching supply and demand for labor and... ...with Nestlé Canada Responsibilities As a Team Lead, your duties will emphasize on training, people management, and operational oversight of the boutique as follows:...Work at office- Lead AWS Cloud Operations in Toronto with Terraform expertise, incident management, and hybrid onsite work... ...Components. The AWS Cloud Engineering Team Lead guides operations, stakeholder... ...user experience, operational efficiency, security, and cost controls.Key Responsibilities...Contract work
- BDO Canada is seeking a Senior Manager, SecOps to lead the security operations function, overseeing cybersecurity monitoring, threat detection, incident... ...and data. You will build and coach a high-performing team, partner with technology and business units, drive metrics and...
- ...looking for an ambitious and proven leader to join our Remote Operations Centre (ROC) as the Team Lead in Calgary, AB, Canada. This outstanding opportunity... ...for this position may be required to undergo a security screening, including a criminal records check. To learn...Full timeWork at officeLocal areaRemote workMonday to fridayFlexible hoursAfternoon shift
- Lead AWS Cloud Operations in Toronto’s hybrid environment, using infrastructure expertise, incident management... ...three days onsite weekly.This contract team lead supports Cloud Platform and... ...activities while maintaining service quality, security, and cost controls.Key Responsibilities...Contract work
- ...Are you a people-first leader with a passion for coaching, collaboration, and operational excellence? We are looking for a Bilingual Customer Service Team Leader to join a vibrant, customer-focused organization... ...operational excellence. Lead & Inspire: Guide a motivated team,...Long term contractPermanent employmentFull timeTemporary workImmediate startMonday to friday
- ...As a Team Lead, you will collaborate with the management team to keep operations running smoothly and inspire the team to deliver an outstanding customer experience. With your leadership, sense of style, and hands-on approach, you will help create a vibrant, organized, and...Minimum wageFull timeWork at officeFlexible hoursWeekend workAfternoon shift
- ...creativity, and teamwork – where every team member plays a role in shaping... ...passion to everything you do, lead with integrity, and believe in... ..., customer experience, and operational goals. Assist in... ...performance. Support store operations in the absence of management,...Permanent employmentFull timePart timeShift workAfternoon shift
- ...people. That’s why we equip our teams with cutting-edge technology,... ..., Mobility/5G, Cloud, Cyber Security, Voice, Collaboration & Contact... ...apart as we continue to be the leading provider of digital... ...generation technology. As a Security Operations Coordinator, you’ll help ensure...Full timeWork at officeShift workNight shiftWeekend work3 days per week
- Lead enterprise talent operations in downtown Edmonton using team leadership, program delivery, and workforce insights across the Alberta Public Service.As Team Lead, Talent Program Operations and Delivery, you will oversee corporate talent management programs and services....
- Triton Environmental Consultants, Ltd. is seeking a Security Site Manager to lead security operations at the Victoria site. The role emphasizes high customer service standards, rapid incident response, and strict adherence to site contractual requirements. You will oversee...Shift work
- Improve customer success operations at Clio by building repeatable processes, interpreting health metrics, and guiding high-performing teams.Reporting to the Director of Customer Success Management, this Team Lead supports day-to-day operations for global Customer Success Managers...
- Apply SCADA and grid operations expertise as Enbridge's Team Lead in Calgary, supporting renewable assets through alarms, outages, and abnormal events. On-call availability is expected.You will lead a Remote Operations Centre team while maintaining compliance with NERC standards...Remote work
- ...you can shape the future, win as a team and grow with us. Pay at Intact is... ...provide flexibility and long-term security for our employees beyond their careers... ...role We're looking for a Team Lead, Actuarial to join our growing Operational Performance Analytics (OPA) team, where...Long term contractManual laborFlexible hours
$161.05k - $319.3k per year
We Are Accenture Security helps organizations prepare, protect, detect... ...or running an entire security operations center, we will help companies... ...to grow with confidence. Our team of the security sector’s... ...sized solutions based on industry leading practices. You have a proven...Full timeWork at officeLocal area- ...cybersecurity strategies with Accenture as the Practice Lead for Operational Technology Security in Canada. You'll secure critical infrastructure and foster... ...• Ability to lead multi-disciplinary, diverse teams Utilize your expertise to advance Accenture's OT Security...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Security Operations Team Lead. Be the first to apply!
Related searches

