Activate JobCopilot
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Operations Analyst, Senior based in Canada.
This role plays a critical part in strengthening enterprise cybersecurity by monitoring, detecting, and responding to advanced threats across complex digital environments. You will operate within a global security operations function, ensuring continuous visibility into security events and rapidly addressing incidents that could impact systems, users, or data. The position involves deep analysis of security telemetry, threat intelligence, and forensic indicators to identify and neutralize risks. You will also contribute to improving detection logic, automation, and response playbooks to enhance overall SOC maturity. Working closely with cross-functional security and IT teams, you will help shape resilient defenses and ensure alignment with industry best practices and security frameworks. This is a senior-level role with both hands-on technical depth and mentorship responsibilities.
Accountabilities
- Monitor, investigate, and respond to security alerts and incidents across enterprise systems using SIEM, EDR, and other security tools.
- Perform advanced threat analysis, root cause investigation, and impact assessment to contain and remediate security incidents.
- Develop, tune, and optimize detection rules, alerting mechanisms, and automated response playbooks to improve SOC effectiveness.
- Analyze security telemetry and logs from diverse sources (endpoints, networks, cloud, and identity systems) to identify anomalies and threats.
- Support incident response activities, including coordination with cross-functional teams and escalation of critical security issues.
- Contribute to vulnerability management, risk assessment, and remediation tracking across the organization.
- Support audits and compliance efforts by gathering evidence, evaluating controls, and ensuring adherence to security frameworks.
- Provide guidance and mentorship to junior analysts while contributing to continuous SOC process improvement.
Requirements
- 5–7+ years of experience in Security Operations, Incident Response, or Cybersecurity analysis roles.
- Strong hands-on experience with SIEM, SOAR, EDR, IDS/IPS, and vulnerability management platforms.
- Solid understanding of security monitoring, incident response processes, and threat detection methodologies.
- Strong knowledge of operating systems (Windows, Linux, macOS), networking fundamentals (TCP/IP, DNS), and identity systems (Active Directory).
- Experience analyzing security logs, telemetry data, and correlating events across multiple systems.
- Familiarity with frameworks such as MITRE ATT&CK and security best practices for detection and response.
- Scripting experience (Python, PowerShell, or equivalent) for automation and analysis is an asset.
- Experience with cloud security monitoring (AWS, Azure, GCP) is considered an advantage.
- Strong communication skills with the ability to engage both technical and non-technical stakeholders.
- Relevant certifications (e.g., Security+, CySA+, CISSP, GCIH, SC-200) are a plus.
Benefits
- Competitive compensation aligned with senior cybersecurity expertise
- Comprehensive health, dental, and wellness benefits package
- Opportunities to work on global-scale security operations and advanced threat environments
- Career growth into senior SOC, threat intelligence, or security engineering pathways
- Exposure to modern security platforms (SIEM, SOAR, EDR, cloud security tools)
- Support for certifications and continuous professional development
- Collaborative and high-impact cybersecurity environment with mentorship opportunities
Your email job alert is now active!
