Manager, Cybersecurity Detection and Response en Tcenergy

Determined, imaginative, curious—if these are some of the ways you describe yourself, we want to learn more about you!

At TC Energy, we are proud to connect the world to the energy it needs. Guided by our values of safety in every step, personal accountability, one team and active learning, we deliver the critical energy that North America and the world rely on while balancing reliability, affordability and sustainability.

The Opportunity

We are seeking a cybersecurity leader to join our organization as Manager, Cybersecurity Detection and Response. In this critical role, you will lead our Security Operations Center (SOC) and direct our enterprise-wide threat detection and incident response capabilities.

As cyber threats continue to evolve in sophistication and impact, your expertise will be instrumental in protecting our digital assets, infrastructure, and sensitive information. You will lead and improve a team of skilled security analysts, implement advanced detection technologies, and establish response protocols that strengthen our security posture.

The ideal candidate brings a blend of technical expertise, leadership experience, and strategic vision to transform our detection and response function. You will serve as the primary authority for security monitoring and incident management, working closely with other teams to communicate security risks and coordinate response efforts across the organization.

This position offers the opportunity to make a significant impact on our organization's security resilience while advancing your career at the forefront of cybersecurity operations and leadership.

What you’ll do

• Lead and develop a team of security analysts and service providers, providing technical guidance and mentorship

• Lead and coordinate the incident response team in handling cybersecurity incidents, including data breaches, malware infections, insider threats, and other security breaches

• Establish and maintain effective security monitoring capabilities and incident response procedures 

• Oversee the implementation and optimization of security tools including SIEM, EDR, and threat intelligence platforms 

• Develop metrics and KPIs to measure the effectiveness of detection and response capabilities

• Drive continuous improvement in all aspects of the team 

• Coordinate incident response activities during security events, ensuring proper escalation and remediation 

• Maintain relationships with key stakeholders across IT, business units, and senior leadership 

• Create and maintain documentation for security processes, playbooks, and response procedures 

• Stay current with emerging threats, vulnerabilities, and security technologies 

• Provide regular reporting on security posture and incident trends to senior leadership 

• Participate in tabletop exercises and simulations to test and strengthen incident response capabilities, business continuity plans, and cross-functional coordination 

• Provide senior leadership with regular updates on security operations 

• Prepare detailed reports on incidents, investigations, and security risks, providing clear and actionable recommendations for improvements

• Effectively communicate threat information and system status to leadership and stakeholders

• Provide guidance and mentorship to members of the Defense and Response team

Minimum Qualifications

• Bachelor’s degree in computer science, engineering, cybersecurity, or related field  

• 10+ years of experience in cybersecurity with at least 5 years in a leadership role. Leadership in an alternate technology role will be considered

• Experience with SIEM platforms, EDR solutions, security orchestration tools, vulnerability management, threat intelligence and cloud security concepts

• Deep understanding of security operations, incident response, and threat hunting 

• Experience overseeing managed service providers

• Strong analytical, investigative, problem-solving, communications skills and the ability to work under pressure are important for success in this role

• Excellent communication and leadership abilities, enabling you to collaborate effectively with diverse teams and guide them through incident response processes

• Strong interpersonal skills, professional demeanor and demonstrated ability to work cross functionally with stakeholders at multiple levels

• Energetic individual who is passionate about continuous improvement and outcomes focused with the ability to learn and adapt quickly to changing environments and priorities

Preferred Qualifications

• Familiarity with one or more of the following Security Architecture standards: NIST CSF, NIST 800-53, CSA Z246.1, TSA Security Directives, CIS CSC, ISA/IEC 62443

• Industry recognized certifications such as CISSP, GCIP, GICSP, CSSA or other industry recognized cybersecurity certification

• Knowledge of, or hands-on experience with operational technology in the energy industry or equivalent

To remain competitive, support our high-performance culture and allow for more flexibility in the way we work, we offer a hybrid work model and flexible dress code for our eligible office-based workforce in Canada, the U.S. and Mexico. #LI-Hybrid

About our business

We are a leader in North American energy infrastructure, spanning Canada, the U.S. and Mexico. Every day, our dedicated team proudly connects the world to the energy it needs—moving over 30 per cent of the cleaner-burning natural gas used across the continent. Complemented by strategic ownership and low-risk investments in power generation, our infrastructure fuels industries and generates affordable, reliable and sustainable power across North America, while enabling LNG exports to global markets.

TC Energy is an equal opportunity employer and participates in the E-Verify program supervised by the US government. We welcome applications from all qualified individuals regardless of race, religion, age, sex, color, national origin, sexual orientation, gender identity, veteran status, or disability. We are also committed to providing accommodations throughout the recruitment process. Applicants requiring accommodations or accessible formats are encouraged to contact us at [email protected] for support.

All applicants must have legal authorization to work in the country where the position is based, without restrictions. Background screening is required for all positions, which may include criminal and/or credit checks. Offers may be extended at a different level or job title that best aligns with the successful candidate's qualifications.

Learn more

Visit us at TCEnergy.com and connect with us on our social medial channels for our latest news, employee stories, community activities, and other updates.

Thank you for considering TC Energy in your career journey.