LP
Security Operations Specialist
LinkedIn Recruiter Post
Join a growing Ottawa - based team supporting security, compliance, and governance. Manage GoC clearances and support ISO 27001/SOC 2 compliance.
About the role
- Lead SOC Team at Starling Group ensuring information security and response for global operations. Collaborate with top SecOps professionals managing incident response and continuous improvement.
Responsibilities
- Lead a team of subject matter experts and analysts to ensure Information Security is managed and continuously improved in line with Bank policy and procedure.
- Supporting the development and progression of the Information Security Analyst team from both a technical and professional perspective.
- Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: **- Cloud Infrastructure/Security.**- Endpoint Detection and Response.**- Perimeter detection tooling.
- Conduct Quality Assurance for Triage case handling, mitigation actions and shift handover, collating lessons learned and implementing improvements where required.
- Interpret logs from a variety of sources (e.g. cloud, endpoint, network) to identify root cause and determine next steps for containment, eradication and recovery as part of incident response activities.
- Work together with other teams in the organisation to analyse, contain, eradicate and recover from cyber security incidents
- Continuous development and maintaining of incident handling, response and readiness processes.
- Support the wider SecOps team with detection engineering - creating and optimising analytic triggers to enhance alert efficacy - and threat hunting based on threat intelligence.
- Documentation of incidents and investigations, including analysis findings, containment steps and root cause.
- Plan and participate in Tabletop Exercises.
- Present investigation findings to technical and non-technical audiences.
Requirements
- 5+ years experience in an in-house SOC role and team, including cyber incident response and digital forensics function.
- Experience in a similar role leading, developing and motivating a team of subject matter experts and other managers in Information and Cyber Security.
- Understanding of AWS Security Solutions (or other Public Cloud Solutions)
- Analysis and Incident Response experience with Cloud systems (GCP, AWS)
- Experience working and supporting analytics/SIEM platforms.
- Experience supporting and conducting Incident Response engagements.
- Experience in endpoint based investigations.
- Experience in cloud based investigations.
- Experience with Incident Command and conducting Tabletop Exercises.
- Experience in acting as both Commander and SME during incidents and investigations.
- Be a Self Starter with the ability to lead, inspire and drive change through an organisation.
- Excellent communication skills (both verbal and written), ability to communicate technical concepts to both technical and non-technical audiences.
- Demonstrated teamwork and collaboration skills as part of a multi-functional team
- Time management, problem-solving and interpersonal skills.
- Eagerness to learn and apply knowledge to new security challenges.
- Willingness to share knowledge with the team and mentor colleagues.
- A high level understanding of mobile, network and operating system security controls.
- Preferred
- Experience in forensics: cloud (GCP, AWS); endpoint/server (Windows, MacOS, Linux); and/or network.
- Any experience of programming in Python, Go and/or Java.
- A Cyber/Information Security related degree and/or relevant cyber security qualification(s) would be desired but not required
- Understanding of malware analysis techniques
Benefits
- A discretionary benefits stipend, payable on a monthly basis, is provided
- 20 days annual leave plus public holidays
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Security Training & Operations Team Lead at OLG overseeing security operations and developing training programs for personnel across various locations. Requires strong leadership in managing safety and compliance protocols.
Head of Fusion & Cybersecurity Operations at TD responsible for strategic direction and operational oversight of protect operations. Safeguarding data and systems from cyber threats and managing teams in cyber crime prevention.
Intermediate Security Operations Centre Analyst at Long View managing security incidents and working with IT systems. Engaging with teams across Canada in a dynamic IT environment.
SOC Analyst responsible for monitoring security events and assessing risks while collaborating with global customers. Working with Fortinet's SOC - as - a - Service team to improve security posture.
LP
IAM Operations Lead
LinkedIn Recruiter Post
IAM Operations Lead responsible for daily administration, governance, and security of identity infrastructure, ensuring correct access and minimizing risks.
CSOC Analyst responsible for managing security incidents and threat investigation at Just Eat Takeaway. Working with an internal team to detect, investigate, and respond to significant threats.
Security Operations Engineer at Supabase providing front - line coverage for security alerts and customer security tickets. Supporting internal IT operations and improving security processes in a remote setup.
Director, Security Operations & Infrastructure at Phreesia managing enterprise - wide security incident response. Leading operational excellence in security tooling and incident operations.
SecOps Engineer integrating security into development processes for Lido Protocol. Collaborating on security practices, incident management, and developer training.