Security automation engineer (autonomous workflow) Jobs

Security Automation Engineer (Autonomous Workflow)
BMO Financial Group —Toronto, ON
- $82,800–$154,800 a year
- Full-time
- Computer Science
- Engineering
- APIs
- Tuition reimbursement
- Life insurance
AI Engineer (Global Security)
Royal Bank of Canada —Toronto, ON
- Full-time
- Computer Science
- DevOps
- Engineering
Staff AI & Agentic Systems Engineer
Mozilla —Remote
- $149,000–$220,000 a year
- Remote
- Databases
- APIs
- AI
- Dental care
- Employee assistance program
Principal Automation Engineer (12 Month Contract)
TMX Group Limited —Toronto, ON
- $125–$145 an hour
- Full-time
- Computer Science
- Engineering
- AWS
6d
Agentic AI Engineer
D3 Security Management Systems —Vancouver, BC
- Full-time
- Azure
- Research
- JavaScript
- Dental care
Quick apply
Enterprise AI Engineer
Porter Airlines Inc. —Toronto, ON
- Full-time
- Computer Science
- SQL
- Analysis skills
6d
Infrastructure Automation Engineer, Vice President
Citi —Mississauga, ON
- $120,800–$170,800 a year
- Full-time
- Azure
- DevOps
- Databases
12d
Senior RPA Engineer
Peoples Trust Company —Toronto, ON
- $90,000–$140,000 a year
- Monday to Friday
- Hybrid work
- Azure
- DevOps
- AWS
- Profit sharing
- Paid time off
Underground Mining Automation Engineer
Worley —Vancouver, BC
- Full-time
- Hybrid work
- Engineering
- Analysis skills
- Programmable logic controllers
Principal Automation Engineer
TMX Group Limited —Toronto, ON
- $130,000–$145,000 a year
- Full-time
- Hybrid work
- Computer science
- Computer Science
- Engineering
AI/ML Engineer
Recutify Inc. —Toronto, ON
- Full-time
- Remote
- Azure
- DevOps
- Databases
Quick apply
DevOps Engineer
Athennian —Remote
- $95,000–$130,000 a year
- Full-time
- Remote
- DevOps
- Databases
- AWS
- Disability insurance
- Dental care
Quick apply
Senior AI Engineer, (Global Security)
Royal Bank of Canada —Toronto, ON
- Full-time
- Azure
- Research
- Databases
6d
Python AI Engineering - Assistant Vice President
Citi —Mississauga, ON
- $94,300–$141,500 a year
- Full-time
- Hybrid work
- Azure
- Computer Science
- Engineering
Senior AI Engineer, Platform Engineering
ResMed —Halifax, NS
- Full-time
- Databases
- APIs
- AI
CCaaS Engineer
Accenture —Toronto, ON
- $69,450–$119,450 a year
- Full-time
- Salesforce
- DevOps
- English
1d
Staff Cloud Software Engineer
AeroVect —Toronto, ON
- Full-time
- Remote
- Computer Science
- Master's degree
- AWS
Security Advisor PAM Specialist
Intact —Mississauga, ON
- $118,700–$145,100 a year
- Full-time
- Hybrid work
- Bilingual
- Azure
- No experience needed
- Employee stock purchase plan
7d
Director, AI Engineering
KPMG —Toronto, ON
- Full-time
- Microsoft Excel
- Computer Science
- Engineering
12d
Senior Security Engineer
Dominion Dynamics —Ottawa, ON
- Full-time
- Scripting
- APIs
- Linux
Agentic Data Specialist (Multiple Levels)
Salesforce —Toronto, ON
- $154,700–$204,700 a year
- Full-time
- Azure
- Salesforce
- Java
Principal Architect & Data Engineer
Motorola Solutions —Toronto, ON
- $160,000–$170,000 a year
- Full-time
- SQL
- AWS
- Recruiting
Lead AI Engineer, Banking Technology - Senior Vice President
Citi —Mississauga, ON
- $145,100–$217,700 a year
- Full-time
- Hybrid work
- Computer Science
- Java
- Master's degree
Sr. Observability Engineering
McKesson —Mississauga, ON
- $99,100–$132,100 a year
- Azure
- Computer Science
- DevOps
14d
Principal Technical Product Manager — AI, DSP & DSPM
DataStealth —Mississauga, ON
- $150,000–$160,000 a year
- Full-time
- Hybrid work
- Azure
- AWS
- Product management
Quick apply

I want to receive the latest job alerts for security automation engineer (autonomous workflow)

By signing in to your account, you agree to Workopolis's Terms of Service and consent to our Cookie and Privacy Policy.

Security Automation Engineer (Autonomous Workflow)

BMO Financial Group
Toronto, ON

Apply Now

Job details

Full-time

Benefits

Tuition reimbursement
Life insurance

Skills

Authentication
Law
Computer Science
Engineering
Post-secondary education
Information Systems
Information security
Splunk
REST
GitHub
APIs
ServiceNow
JSON
AI
Python

Full job description

Application Deadline:

08/16/2026

Address:

100 King Street West

Job Family Group:

Technology

Job posting:

We are building a modern, automation-first Security Operations capability focused on real-time detection and response to cyber threats where the majority of alerts are automatically enriched, triaged, or resolved with minimal analyst intervention.
This role goes beyond traditional automation engineering. You will design and build autonomous workflows that combine detection logic, automation, and AI-assisted development into scalable, repeatable systems.
Our team was tasked to reduce the investigation time and empower SOC analysts with qualitative and enriched alerts, giving them back the time they need to hunt real threats. Our current philisophy is to prioritize practical delivery over perfect initial solution—leveraging SOAR, Power-automate and GitHub Copilot to collaborate, experiment, and ship high-impact solutions quickly.

What You’ll Do

Build Autonomous Security Workflows

Design, produce and manage end-to-end automation that enhance detection via enrichment, triage, response, containment or auto closure.
Navigate across multiple security platforms (ServiceNow, Splunk ES, CrowdStrike) to improve signal to noise ratio and reduce mean time to respond and contain.

AI-Driven Workflow Development

Design LLM-generated & enriched workflows combined with deterministic logic for reliability across multiple stacks (Splunk SOAR playbooks, Python scripts, Power Automate)
Build multi-step, agent-like flows that enrich alerts, validate data, and support automated triage decisions
Apply detection-as-code principles such as version-controlled workflows, CI/CD pipelines, testing, validation, and peer review.

Collaboratively build resilient and audit ready solutions

Partner with detection engineers and SOC analysts to operationalize detections with automation workflows and improve triage speed and response consistency
Use GitHub Copilot daily to accelerate development and prototyping
Apply strong judgment on when to use LLM-based vs traditional code and how to ensure outputs are reliable, auditable, and repeatable
Collaborate primarily through GitHub (repos, PRs, code reviews) as the single source of truth, as well as shared libraries, reusable workflow patterns, agent/workflow templates.

Solve Complex Integration Problems

Reverse-engineer APIs and integrations when documentation is limited
Handle real-world challenges related to Authentication (OAuth, tokens), pagination, retries, rate limits, data normalization and enrichment
Support building and maintaining an automation library and a stable automation platform.
Design workflows resilient to API failures, partial data, third-party instability

Must-Have

Typically a post-secondary degree in Computer Science, Engineering, Information Systems, Information Security and between 2-4 years of relevant experience in either Security automation OR AI powered program development OR Detection engineering environments
Proven ability to build and ship automation end-to-end
Experience integrating systems via APIs (REST/JSON, auth patterns)
Hands-on GitHub experience (PRs, branching, collaboration)
Daily use (or strong experience) with GitHub Copilot or similar AI coding tools
Ability to work in ambiguous, evolving environments and still deliver solutions

Highly Valuable (What Sets You Apart)

Experience designing AI-driven workflows or agent-style systems
Understanding of Prompt design coupled with structured output as well as orchestration patterns (multi-step, validation loops, fallback, retry)
Ability to combine AI capabilities with deterministic logic (Python, rules, validation layers)
Strong intuition to distinguish when AI adds value vs when it adds risk or cost

How You Work

Builder mindset: you prototype, ship, and iterate quickly
Pragmatic security engineer: you choose the simplest solution that works while considering risks
Data driven: you seek continuous improvement based on metrics observation (success rate, failures pattern)
Curious and experimental: you actively explore new tools and approaches
Ownership-driven: you take initiative to unblock yourself, you self identify automation opportunities with high impact on detection coverage, analyst time to resolve and respond.

Why This Role

Build the next generation of security workflows
Shape how AI is practically used in a SOC environment
Work in a team that values:
- Speed with risk-aware execution
- Ownership
- Real impact via simplified processes

Salary :

$82,800.00 - $154,800.00

Pay Type:

Salaried

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

About Us

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en .

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

Apply Now

Refine Your Search

I want to receive the latest job alerts for security automation engineer (autonomous workflow)

What You’ll Do

Build Autonomous Security Workflows

Design, produce and manage end-to-end automation that enhance detection via enrichment, triage, response, containment or auto closure.

Navigate across multiple security platforms (ServiceNow, Splunk ES, CrowdStrike) to improve signal to noise ratio and reduce mean time to respond and contain.

AI-Driven Workflow Development

Design LLM-generated & enriched workflows combined with deterministic logic for reliability across multiple stacks (Splunk SOAR playbooks, Python scripts, Power Automate)

Build multi-step, agent-like flows that enrich alerts, validate data, and support automated triage decisions

Apply detection-as-code principles such as version-controlled workflows, CI/CD pipelines, testing, validation, and peer review.

Collaboratively build resilient and audit ready solutions

Partner with detection engineers and SOC analysts to operationalize detections with automation workflows and improve triage speed and response consistency

Use GitHub Copilot daily to accelerate development and prototyping

Apply strong judgment on when to use LLM-based vs traditional code and how to ensure outputs are reliable, auditable, and repeatable

Collaborate primarily through GitHub (repos, PRs, code reviews) as the single source of truth, as well as shared libraries, reusable workflow patterns, agent/workflow templates.

Solve Complex Integration Problems

Reverse-engineer APIs and integrations when documentation is limited

Handle real-world challenges related to Authentication (OAuth, tokens), pagination, retries, rate limits, data normalization and enrichment

Support building and maintaining an automation library and a stable automation platform.

Design workflows resilient to API failures, partial data, third-party instability

Must-Have

Typically a post-secondary degree in Computer Science, Engineering, Information Systems, Information Security and between 2-4 years of relevant experience in either Security automation OR AI powered program development OR Detection engineering environments

Proven ability to build and ship automation end-to-end

Experience integrating systems via APIs (REST/JSON, auth patterns)

Hands-on GitHub experience (PRs, branching, collaboration)

Daily use (or strong experience) with GitHub Copilot or similar AI coding tools

Ability to work in ambiguous, evolving environments and still deliver solutions

Highly Valuable (What Sets You Apart)

Experience designing AI-driven workflows or agent-style systems

Understanding of Prompt design coupled with structured output as well as orchestration patterns (multi-step, validation loops, fallback, retry)

Ability to combine AI capabilities with deterministic logic (Python, rules, validation layers)

Strong intuition to distinguish when AI adds value vs when it adds risk or cost

How You Work

Builder mindset: you prototype, ship, and iterate quickly

Pragmatic security engineer: you choose the simplest solution that works while considering risks

Data driven: you seek continuous improvement based on metrics observation (success rate, failures pattern)

Curious and experimental: you actively explore new tools and approaches

Ownership-driven: you take initiative to unblock yourself, you self identify automation opportunities with high impact on detection coverage, analyst time to resolve and respond.

Why This Role

Build the next generation of security workflows

Shape how AI is practically used in a SOC environment

Work in a team that values:

Speed with risk-aware execution

Ownership

Real impact via simplified processes