Requisition ID: 42936

Job Description

In every role, McCainers are ambitious, curious, and passionate about creating exceptional work experiences - together. With a customer-first mindset, we make doing business with McCain easy.

About the role.

We are seeking a hands-on Cyber Defense Engineer to help evolve our Security Operations capability from a traditional monitoring model to a modern, engineering-driven detection and response function.

This role sits within our Cyber Security Operations team and will focus on designing, building, and optimizing cloud-native security capabilities in Microsoft Azure, while working closely with our MDR partner and internal stakeholders.

This is an opportunity to build—not just run—security operations, shaping how we detect, respond to, and mitigate threats across a global food enterprise.

What you’ll be doing.

Detection & Response Engineering

• Design, develop, and tune detection use cases in Microsoft Sentinel and Defender
• Build and maintain analytics rules, KQL queries, and alerting logic
• Improve signal-to-noise ratio by tuning detections and reducing false positives

Security Automation & Integration

• Develop automation playbooks (Logic Apps / SOAR) to streamline response actions
• Integrate security tooling across Azure, M365, and enterprise platforms
• Enable end-to-end detection-to-response workflows

Cloud Security (Azure Focus)

• Implement and enhance Azure-native security controls (Defender for Cloud, Entra ID, etc.)
• Monitor and secure cloud workloads, identities, and data flows
• Partner with cloud/platform teams to embed security-by-design

Threat-Informed Defense

• Translate threat intelligence into actionable detections
• Map detections to frameworks such as MITRE ATT&CK
• Continuously improve coverage against priority threat scenarios (e.g., identity compromise, ransomware)

MDR & SOC Collaboration

• Work closely with our MDR partner to:
• Improve detection quality
• Define escalation paths
• Drive continuous improvement
• Act as a technical bridge between internal teams and external providers

What you’ll need to be successful.

Hands-on experience with Microsoft Security Stack, including Sentinel (SIEM)
Strong working knowledge of Azure security services:

• Defender for Cloud
• Microsoft Defender XDR
• Entra ID (Azure AD)
• Proficiency in KQL (Kusto Query Language)
• Experience building SOAR playbooks (Logic Apps preferred)
   

Engineering Mindset

• Experience in detection engineering, automation, or security tooling development
• Ability to design and build solutions, not just operate tools
• Familiarity with scripting (Python, PowerShell, or similar)
   

Security Operations Knowledge

• Understanding of SOC processes, incident response, and threat detection
• Experience working with or alongside an MDR/SOC provider is an asset
• Familiarity with frameworks like MITRE ATT&CK, NIST CSF
   

About the team.

This role is part of the Cyber Security Operations team, collaborating closely with cloud engineering, platform teams, and business stakeholders, as well as an external MDR partner. The team is focused on transforming from a traditional SOC model to a proactive, engineering-led cyber defense capability, enabling stronger protection across a global food enterprise.

About McCain.

• Click Here to learn more about McCain and how we provide you with opportunities to make an impact that matters.

Leadership principles.

At McCain, our leadership principles guide how we engage with customers, collaborate as a team, and achieve success. We focus on understanding customer needs, driving innovation, empowering people, and taking ownership to clear obstacles and deliver results.

The McCain experience.

We are McCain. This statement is a testament to our collective strength and our individual value. Your contributions play a vital role in our success. Our winning culture is rooted in authenticity and trust, empowering us to bring out the best in one another. Here, you’ll find opportunities to learn, grow, and thrive. Join us and experience why we’re better together.

Compensation Package: $69,700.00 - $93,000.00 . CAD annually + Bonus Eligibility 

The above reflects the target compensation range for the position at the time of posting. Hiring compensation will be determined based on experience, skill set, education and training, and other organizational needs. This posting is for an existing vacancy.