About the role

IT Security Analyst responsible for advanced analysis of security incidents and supporting SOC operations in Canada. Collaborating with teams to improve detection capabilities and utilizing AI.

Responsibilities

Take ownership of cybersecurity alerts and incidents escalated by SOC Level 1
Conduct advanced analyses and recommend appropriate actions
Contribute to initial incident response in collaboration with relevant teams
Serve as the technical escalation point and support Level 1 SOC analysts
Participate in continuous improvement of processes, detection rules and SOC metrics
Thoroughly document investigations, findings, decisions and actions taken
Use approved artificial intelligence and automation tools to support triage
Help identify relevant AI use cases to improve SOC efficiency

Bachelor’s degree in Computer Science, Cybersecurity or a related field
Minimum 3–5 years of experience in cybersecurity, including relevant SOC experience
Experience with SIEM, XDR or EDR platforms, notably Microsoft Sentinel, Microsoft Defender XDR or Splunk Enterprise Security
Ability to read and write investigative queries in KQL or SPL
Knowledge of the MITRE ATT&CK framework and ability to apply it in investigations
Familiarity with AI and automation tools applied to cybersecurity
Knowledge of a cloud environment (AWS or Azure)
Functional proficiency in English, both written and spoken
Relevant certifications preferred: SC-200, CySA+, GCIH or equivalent