Quick overview
Job description
Role Summary
Reporting to the Director, Cyber Security Operations, this co-op role operates across security operations, network engineering, and AI-driven automation.
This is a hands-on role where you will work directly with real security alerts, incidents, network systems, and operational workflows. In parallel, you will help design and build automation and AI-assisted solutions that reduce manual work, improve investigation quality, and strengthen how security and network operations are executed day-to-day.
Why This Role
- Work with real alerts, tickets, logs, and enterprise infrastructure
- Gain hands-on experience across both security operations and networking
- Build AI copilots, automations, and workflows that solve real operational problems
- Contribute to improving investigation quality and reducing analyst workload
- Help shape safe and practical enterprise use of AI
What You Will Accomplish
- Monitor and triage alerts across SIEM, endpoint, email, identity, and access systems
- Investigate phishing, malware, suspicious logins, and security events
- Collect evidence, validate findings, and clearly document investigations
- Escalate incidents and coordinate with IT and other teams
- Support vulnerability tracking, remediation validation, and advisory monitoring
- Assist with access reviews, account changes, and security controls
- Monitor network performance, availability, and connectivity
- Troubleshoot issues across LAN, WAN, VPN, and wireless environments
- Assist with configuration of switches, routers, and network devices
- Support network changes and maintain diagrams and documentation
- Investigate network-related alerts and assist during outages or disruptions
- Support segmentation reviews and validation of trust boundaries
- Assist with firewall rule reviews and IPS tuning validation
- Validate access controls and permissions against requirements
- Support logging, monitoring validation, and dashboard review
- Review VPN and remote access configurations
- Assist with vulnerability remediation related to network infrastructure
- Maintain documentation and support audit readiness and evidence collection
- Create, update, and close tickets across security and network activities
- Maintain clear, structured, and audit-ready documentation in Jira
- Track remediation efforts and follow up on outstanding items
- Improve workflow consistency, categorization, and documentation quality
- Build automations to reduce repetitive work (ticket creation, enrichment, correlation, deduplication)
- Develop AI-assisted workflows for triage, summarization, and investigation support
- Create repeatable templates, prompt patterns, and investigation frameworks
- Improve documentation quality and consistency using structured approaches
- Evaluate AI limitations (hallucinations, missing evidence, overconfidence) and implement safeguards
- Support AI-driven monitoring and operations tooling
- Work with real data (alerts, logs, tickets) to improve operational efficiency
- AI-assisted ticket triage and enrichment
- Standardize how alerts are converted into structured incident records
- Improve consistency, speed, and accuracy of investigations
- Investigation quality rubric and feedback loop
- Define what “good” investigation output looks like
- Create scoring and improvement mechanisms for analysts and AI outputs
- Copilot / agent for SOC workflows
- Build a small agent that performs a real task end-to-end (summarize, recommend actions, generate tickets)
- Focus on reliability, guardrails, and measurable time savings
- Safe enterprise AI playbook
- Define guidelines for AI usage, data handling, and risk prevention
- Help reduce data leakage and unsafe usage patterns
- Support least-privilege access and scoped data usage for AI tools
- Help define what data can and cannot be used with AI systems
- Contribute to guardrails that prevent data exposure or misuse Assist in creating internal guidance for safe and effective AI use
Safe AI and Governance
- How enterprise security and network operations are run in practice
- How to investigate real incidents and document work in an audit-ready way
- How infrastructure, security, and business systems intersect
- How automation and AI improve efficiency and reduce manual work
- How governance, controls, and compliance apply in real environments
Security Operations
You may work on one or more of the following:
What You’ll Learn
What We Are Looking For
- Enrolled in Cybersecurity, Networking, Computer Science, Engineering, Data Science, or a related program
- Understanding of security fundamentals (authentication, access control, encryption, threats)
- Knowledge of networking fundamentals (TCP/IP, DNS, routing, switching)
- Familiarity with security or network tools (SIEM, Wireshark, Packet Tracer, etc.)
- Basic troubleshooting skills across systems or networks
- Python (preferred) for automation and data handling
- Basic Bash or PowerShell knowledge
- Comfort working with logs, alerts, or semi-structured data
- Experience building or experimenting with AI/LLM-based solutions
- Exposure to automation, workflows, or integrations
- Interest in applying AI to real operational problems
- Understanding of risks such as data leakage or incorrect outputs
- Participation in CTFs, labs, or technical competitions
- Personal or academic projects in security, networking, or automation
- Experience building tools that solve real problems (not just demos)
- Interest in how systems operate in real enterprise environments
- Able to independently triage and document lower-severity alerts and issues
- Demonstrates strong understanding of networking and security fundamentals
- Ships at least one automation or AI-driven improvement that reduces manual work
- Improves investigation quality, consistency, or workflow efficiency
- Demonstrates strong judgment, including validating AI outputs and escalating when needed
What We’re Looking For
Education
AI / Automation Experience (Strongly Preferred)
Success Criteria
Similar jobs
- EV
Officer, Loss Prevention (Temporary)Recently posted Auto Apply
Evr · Sparwood · On-site 🇨🇦
Microsoft ExcelMicrosoft OfficeELK+3AdministrativeC$71.6k/yr - BE

Security ArchitectRecently posted Auto Apply
Benevity · Toronto · Hybrid 🇨🇦
DockerGCPAWS+12TechnologySalary not listed - MA

Security Engineer II - Identity and Access ManagementRecently posted Auto Apply
Marqeta Inc · Remote - Ontario OR British Columbia · Remote 🇨🇦
DynamoDBAWSMFA+12TechnologyC$104k - C$130k/yr - D2

Senior Manager, Corporate SecurityRecently posted Auto Apply
D2L · Kitchener · Hybrid 🇨🇦
Talent AcquisitionOnboardingAWS+20C$123k/yr - LV
Principal Architect Team Lead, SecurityRecently posted Auto Apply
Lvs1 · Calgary · Hybrid 🇨🇦
Vendor ManagementInstagramOperations & Project ManagementC$143.5k - C$188.4k/yr - SS
Analyste senior en gestion des identités et des accès (GIA) - M365 / Entra IDRecently posted Auto Apply
Solution SFT · Québec City, Quebec · Hybrid 🇨🇦
SQLMicrosoft OfficeActive Directory+1Salary not listed - JA
Product Manager - Security EngineeringRecently posted Auto Apply
Jane · Canada · Hybrid 🇨🇦
MFAOAuthSOC 2+3Operations & Project ManagementC$94k - C$141k/yr - SE
Staff Security Engineer | Enterprise SecurityRecently posted Auto Apply
ServiceNow · Toronto, Ontario · Remote 🇨🇦
JavaScriptPythonPowerShell+16TechnologySalary not listed - SE
Staff Security Engineer | Security EngineeringRecently posted Auto Apply
ServiceNow · Toronto, Ontario · Remote 🇨🇦
JavaScriptPythonShell+12TechnologySalary not listed - SE
Senior Staff Security Engineer | Systems EngineeringRecently posted Auto Apply
ServiceNow · Toronto, Ontario · Remote 🇨🇦
JavaScriptPythonShell+12TechnologySalary not listed - CR
Cybersecurity AnalystRecently posted Auto Apply
Creyos · Toronto, Ontario · On-site 🇨🇦
SOC 2ConfluenceJiraTechnologyC$80k - C$100k/yr - LV
Principal Architect, SecurityRecently posted Auto Apply
Lvs1 · Calgary · Hybrid 🇨🇦
Vendor ManagementInstagramC$143.5k - C$188.4k/yr
