Intermediate Security Operations Centre Analyst at Long View managing security incidents and working with IT systems. Engaging with teams across Canada in a dynamic IT environment.
Responsibilities
Actively participate in 24x7 operations of the Long View Security Operations Centre
Monitor, identify and validate security events generated from Security Information Event Management (SIEM) tools
Actively work in monitoring, event and incident management tools like Sentinel and ServiceNow
Respond to critical business impacting situations and coordinate the efforts required to engage the proper resources to remediate the issue
Coordinate major security incident situations and provide internal communications via email in a timely manor
Provide general support for Security Information Event Management (SIEM) tool changes, tweaks, additions and updates within Sentinel and any additional tools leveraged by Long View
Provide security guidance to team members across the organization how to best identify, contain and remediate security related incidents
Understand complex issues across on-premise, public and private cloud solutions and articulate the impact to higher tier team members
Follow and establish process documentation for receipt of security alerts for monitored devices, acknowledge the receipt of the event, opening and/or updating service desk tickets to track the handling of events to resolution and closure, assignment of the ticket to the appropriate owner
Work with cloud technologies like Azure, AWS and Google Cloud Platform
Fulfill reporting requests that can be pulled from Long View tools
Requirements
3+ years of professional experience in incident detection and response, malware analysis, or cyber forensics
SC-200 Certification
Experience working with MS Defender
Extensive experience evaluating, interpreting, and integrating relevant data sources for the purpose of merging network attack analyses with counterintelligence and law enforcement investigations
Experience with various IT service management tools including performance monitoring and ITSM solutions
Experience with Security Information Event Management platforms like Sentinel, Splunk and Sumo Logic
Experience working with incident, problem, change and service requests that follow ITIL framework standards
Experience provisioning new client services and working through customer onboarding tasks
Proven ability to troubleshoot and resolve technical and procedural issues
Strong verbal and written communication which will allow you to communicate effectively to customers in non-technical terms
Ability to react quickly and professionally with a sense of urgency
Ability and desire to work on an on-call rotation for 24-hour support
Security Training & Operations Team Lead at OLG overseeing security operations and developing training programs for personnel across various locations. Requires strong leadership in managing safety and compliance protocols.
Lead SOC Team at Starling Group ensuring information security and response for global operations. Collaborate with top SecOps professionals managing incident response and continuous improvement.
Head of Fusion & Cybersecurity Operations at TD responsible for strategic direction and operational oversight of protect operations. Safeguarding data and systems from cyber threats and managing teams in cyber crime prevention.
SOC Analyst responsible for monitoring security events and assessing risks while collaborating with global customers. Working with Fortinet's SOC - as - a - Service team to improve security posture.
IAM Operations Lead responsible for daily administration, governance, and security of identity infrastructure, ensuring correct access and minimizing risks.
CSOC Analyst responsible for managing security incidents and threat investigation at Just Eat Takeaway. Working with an internal team to detect, investigate, and respond to significant threats.
Security Operations Engineer at Supabase providing front - line coverage for security alerts and customer security tickets. Supporting internal IT operations and improving security processes in a remote setup.
SecOps Engineer integrating security into development processes for Lido Protocol. Collaborating on security practices, incident management, and developer training.