Bell Cyber is seeking a Bilingual CIC Analyst to join our Cyber Intelligence Centre, helping protect customers through security monitoring, investigation and incident response.
In this role, you will investigate activity across multiple customer environments, connect evidence from different security platforms and help determine the right response. You will also contribute to threat hunting, detection improvements and the responsible use of security automation.
What you’ll do
- Monitor and triage alerts across SIEM, endpoint, identity, network, email, cloud and vulnerability management platforms.
- Investigate suspicious activity, establish incident scope and timelines, and document evidence supporting your conclusions.
- Manage assigned cases through escalation or closure, meeting customer procedures and service level targets.
- Coordinate customer-approved response actions and support major incident investigations.
- Conduct focused threat hunts and use threat intelligence and MITRE ATT&CK to strengthen investigations.
- Communicate findings and recommended actions clearly to customers and internal teams.
- Identify recurring false positives, detection gaps and opportunities to improve workflows.
- Maintain accurate case records, investigation notes and shift handovers.
What you bring
- Post-secondary education in cybersecurity, information technology, computer science or a related discipline, or an equivalent combination of education, training and experience.
- Practical experience in security monitoring, incident investigation, IT operations, network operations, system administration or a related technical role.
- Working knowledge of operating systems, networking, authentication, cloud services and security controls.
- The ability to interpret logs, correlate security telemetry and explain conclusions using evidence.
- Strong written and verbal communication skills.
- Sound judgment, attention to detail and the ability to manage competing priorities during time-sensitive investigations.
- A collaborative approach and a commitment to protecting confidential customer information.
Technical experience
Experience with relevant technologies is valuable, including:
- SIEM: Microsoft Sentinel, Splunk, Elastic Security, FortiSIEM, Cortex XSIAM or IBM QRadar.
- Endpoint and XDR: Microsoft Defender XDR, CrowdStrike Falcon, SentinelOne, FortiEDR or Sophos.
- Automation and cloud: Cortex XSOAR, FortiSOAR, Microsoft Logic Apps, and Azure, AWS or Google Cloud.
- Querying and scripting: KQL, XQL, PowerShell, Python or comparable languages.
You do not need experience with every platform listed.
Additional assets
Experience in an MSSP or multi-tenant SOC; exposure to threat hunting, malware analysis, digital forensics or incident response; and certifications such as Security+, CySA+, SC-200, GCIH or relevant vendor certifications.
Work environment
Our Cyber Intelligence Centre operates 24/7/365, and shifts may include evenings, nights, weekends and statutory holidays.
Salary Range: $70,000 to $85,000 per year
Bell Cyber welcomes applications from qualified candidates with diverse backgrounds and experiences. Accommodations are available upon request throughout the recruitment process.
