Junior SOC Analyst monitoring and responding to security incidents for Long View, a North American IT services provider. Supporting SIEM operations, cloud security, incident escalation, and 24x7 coverage.
Responsibilities
Participate actively in 24x7 operations of the Long View Security Operations Centre
Monitor, identify, and validate security events generated from SIEM tools
Work with monitoring, event, and incident management tools including Sentinel and ServiceNow
Respond to critical business-impacting situations and coordinate resources to remediate issues
Coordinate major security incidents and provide timely internal email communications
Support SIEM tool changes, tweaks, additions, and updates in Sentinel and other Long View tools
Provide security guidance to team members on identifying, containing, and remediating security incidents
Analyze complex issues across on-premise, public cloud, and private cloud solutions and communicate impacts to higher-tier team members
Follow and establish security alert process documentation, acknowledge events, and manage service desk tickets through resolution and closure
Assign tickets to appropriate owners
Work with Azure, AWS, and Google Cloud Platform
Fulfill reporting requests using Long View tools
Act as the main security escalation point between Integrated Global Services team members, branches, clients, and vendors
Requirements
1+ years of professional experience in incident detection and response, malware analysis, or cyber forensics
SC-200 certification
Experience working with MS Defender
Extensive experience evaluating, interpreting, and integrating relevant data sources for merging network attack analyses with counterintelligence and law enforcement investigations
Experience with IT service management tools, including performance monitoring and ITSM solutions
Experience with SIEM platforms such as Sentinel, Splunk, and Sumo Logic
Experience with incident, problem, change, and service requests following ITIL framework standards
Experience provisioning new client services and completing customer onboarding tasks
Proven ability to troubleshoot and resolve technical and procedural issues
Strong verbal and written communication skills for explaining technical matters to customers in non-technical terms
Ability to react quickly and professionally with a sense of urgency
Ability and desire to work on an on-call rotation for 24-hour support
Intermediate network and security certifications such as Security+, Network+, SSCP, and/or CCNA Security are extra assets
SC-900 or an equivalent certification is an extra asset
Benefits
Permanent staff position
Paid training
Career life planning
Relocation and travel opportunities
RSP plan
Exciting projects while accessing the latest technologies
Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.
IT Systems Administrator securing cloud, hardware, and network assets for an Alberta resource and environmental services group. Managing cybersecurity, infrastructure, procurement, and end - user support.
Cyber Defender protecting Ontinue’s AI - powered MXDR customers through SOC threat detection and response. Investigating threats across identity, endpoint, network, and cloud environments.
Security Operations Team Lead building Safe Software’s cybersecurity operations for FME, its enterprise data integration platform. Leading incident response, security tooling, compliance, and team growth.
SOC cybersecurity analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Improving 24×7 detection, investigation, and incident response capabilities.
SOC analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Investigating escalated alerts and improving 24×7 security operations.
Senior Security Operations Engineer monitoring incidents and leading forensics for Samsara’s IoT - connected operations platform. Building security automation and supporting insider - threat investigations.