SOC Analyst - Level 2/3 (6 positions)
- Greater Montreal Metropolitan Area, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- 3+ years of experience as a SOC or IT security analyst
- Posting language
- English
- Posted
Original job description
SOC Analyst – Level 2/3
Catamania is looking for a Level 2/3 SOC Analyst to join the Cyber Defense Center of a major international group.
What you’ll do
- Analyze, investigate and escalate security alerts in a 24/7 follow-the-sun SOC
- Support Incident Response once an incident is confirmed
- Hunt threats alongside the CTI team
- Tune detection use cases and improve playbooks and SOPs
- Take part in IR simulations and contribute to SOC projects
What we’re looking for
- 3+ years of experience as a SOC or IT security analyst
- Hands-on experience with SIEM/SOAR and log analysis (network, endpoint, firewall, IDS/IPS, email gateway)
- Solid knowledge of the Cyber Kill Chain and MITRE ATT&CK
- Good grasp of attack techniques and security operations concepts
- Nice to have: Python skills and transport/logistics experience
- You’re autonomous, proactive and analytical, at ease with technical and business teams, and you know how to handle sensitive matters with discretion.
More about this job
Responsibilities
Analyze, investigate, and escalate security alerts in a 24/7 follow-the-sun SOC, and support incident response after incidents are confirmed. Collaborate with the CTI team on threat hunting, tune detection use cases, improve playbooks and procedures, and participate in incident response simulations and SOC projects.
Requirements
Candidates should have at least three years of experience as a SOC or IT security analyst, hands-on SIEM/SOAR and log analysis experience, and knowledge of the Cyber Kill Chain, MITRE ATT&CK, attack techniques, and security operations. Python skills and transport or logistics experience are advantageous; candidates should also be autonomous, proactive, analytical, discreet, and comfortable working with technical and business teams.
Skills
- Security Alert Analysis
- Incident Investigation
- Incident Response
- Threat Hunting
- SIEM
- SOAR
- Log Analysis
- Cyber Kill Chain
- MITRE ATT&CK
- Detection Use Case Tuning
- Playbook Development
- Python
- Security Operations
- Analytical Thinking
- Communication
- Discretion
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Transportation
- Logistics
Keywords
- SOC
- Cyber Defense Center
- Security Alerts
- Incident Investigation
- Incident Escalation
- Incident Response
- Threat Hunting
- CTI
- SIEM
- SOAR
- Log Analysis
- Network Logs
- Endpoint Logs
- Firewall Logs
- IDS/IPS
- Email Gateway
- Cyber Kill Chain
- MITRE ATT&CK
- Attack Techniques
- Detection Use Cases
- Playbooks
- Standard Operating Procedures
- IR Simulations
- Python
- Transport
- Logistics