Find work in Canada.

328,100 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Save this search

Added 2 days ago
Intelligence Mission Data Systems Analyst
ADGA Group Consultants Inc
Ottawa, ON
$125,000 to $140,000 CAD / year
Full-time
…industry, specializing in C5ISRT, simulation and training, cyber and infrastructure security, and program delivery. With nearly 60 years of experience, ADGA supports federal clients and…
Added 2 days ago
IT Analyst & IT Graduates
Canadian Security Intelligence Service (CSIS) | Service canadien du renseignement de sécurité (SCRS)
Gatineau, QC
Full-time
If you are an upcoming graduate, or if you have recently graduated, you are eligible to apply to many of our IT Analyst positions. Tell us what you are passionate about in IT and we will…
Added 1 day ago
Network Security Analyst – ICAT Infrastructure
Mackenzie Health
Vaughan, ON
$51.04 to $60.61 CAD / hour
Full-time
Reporting to the Manager, Digital Information Systems, the Network Security Analyst is responsible for configuring, deploying and maintaining the comprehensive enterprise network security…
Added 1 month ago
Senior TIPS Support Analyst
Pembina Pipeline Corporation
Calgary, AB
…and processing facilities and an oil and natural gas liquids infrastructure and logistics business. Our operations along the hydrocarbon value chain allow us to offer a full state of…
Added 1 day ago
Sr Analyst
CDW
Mississauga, ON
Full-time
The Senior Analyst provides second-level technical client support such as: cyber security analysis of detected anomalies; deep analysis of the operating system; dealing with system crashes…
Added 2 days ago
Intelligence Mission Data Systems Analyst
ADGA Group
Ottawa, ON
$125,000 to $140,000 CAD / year
Full-time
…industry, specializing in C5ISRT, simulation and training, cyber and infrastructure security, and program delivery. With nearly 60 years of experience, ADGA supports federal clients and…
Added 1 month ago
Senior Appian Developer
The Hospital for Sick Children
Toronto, ON
Full-time
The position sits within a team that includes full-stack developers, a DevOps engineer, a Business Analyst, a Product Owner, and alongside an App Support team with foundational technical…
Added 2 days ago
Senior Cyber Defence Analyst
nesto
Canada
Full-time
We're looking for a Senior Cyber Defence Analyst reporting to the Cyber Defence Director. This role is ideal for someone who thrives on hands-on investigation, detection engineering, and…
Added 2 days ago
Cybersecurity Operations Analyst
Powerex
Vancouver, BC
Full-time
Coordinate response activities with infrastructure, networking, cloud, application, and business teams to contain and remediate security incidents.
Added 2 days ago
IT Analyst & IT Graduates
Canadian Security Intelligence Service (CSIS) | Service canadien du renseignement de sécurité (SCRS)
Ottawa, ON
Full-time
If you are an upcoming graduate, or if you have recently graduated, you are eligible to apply to many of our IT Analyst positions. Tell us what you are passionate about in IT and we will…
Added 3 days ago
Senior Infrastructure Analyst
EllisDon
Mississauga, ON
Full-time
The Senior Infrastructure Analyst is responsible for designing, implementing, modernizing, and supporting enterprise infrastructure across hybrid environments, including on-premises data…
Added 3 days ago
Senior Sector Resilience Analyst
Bank of Canada
Ottawa, ON
Temporary
We are seeking an innovative and dedicated individual to join the Sector Resilience and Strategic Partnerships team within the Cyber Security Division!
Added 3 days ago
Accounting Manager/Senior Accountant
Dexcent
Edmonton, AB
Full-time
…comprehensive solutions, specializing in information analytics, cyber-security, infrastructure, and control systems engineering. As such, we pride ourselves on truly transforming industrial…
Added 4 months ago
Student, Cyber Security Analyst - Winter 2027
MDA Space
Richmond, BC · Brampton, ON · Sainte-Anne-de-Bellevue, QC
Full-time
…satellites, Earth and space observation, and space exploration and infrastructure. The global MDA Space team of more than 4 000 space experts has the knowledge and know-how to turn an…
Added 5 days ago
Senior Information Security Analyst
Lifemark Health Group
Brampton, ON · Toronto, ON
$80,000 to $100,000 CAD / year
Full-time
Lifemark Health Group is seeking a Senior Information Security Analyst for a permanent, full-time role on our Security Team. In this position, you will monitor and respond to security…
Added 4 days ago
Senior Information Security Analyst
Lifemark Health Group
Toronto, ON · North York, ON
$80,000 to $100,000 CAD / year
Full-time
Lifemark Health Group is seeking a Senior Information Security Analyst for a permanent, full-time role on our Security Team. In this position, you will monitor and respond to security…
Added 4 days ago
Senior Information Security Analyst
Lifemark Health Group
Brampton, ON
$80,000 to $100,000 CAD / year
Full-time
Lifemark Health Group is seeking a Senior Information Security Analyst for a permanent, full-time role on our Security Team. In this position, you will monitor and respond to security…
Added 5 days ago
Cyber Security Analyst II
Bell
Toronto, ON
We are seeking a highly motivated Cyber Security Analyst II to join Bell’s Network team and play a key role in protecting and supporting our world-class broadband fibre and wireless…
Added 4 days ago
Lead Cybersecurity Operations Analyst, Deloitte Global Technology
Deloitte
Toronto, ON
Full-time
…people can find meaning and opportunity. It builds consumer and business confidence, empowers organizations to find imaginative ways of deploying capital, enables fair, trusted, and…
Added 5 days ago
Information Security Operations Analyst (Toronto, Canada)
Starling
Toronto, ON
Full-time
…you will find support in your team and from across the global business. We are in this…
Added 5 days ago
Identity and Access Cyber Security Analyst
Alberta Health Services
Edmonton, AB · Greater Edmonton Metropolitan Area
Full-time
As an Identity and Access Cyber Security Analyst, you will play a key role in helping shape and strengthen identity security services within one of Canada's largest healthcare technology…
Added 5 days ago
Sr. Cyber Security Analyst
Vermilion Energy
Calgary, AB
Full-time
Are you an experienced Cyber Security professional who can combine technical depth with strong business communication? Do you have experience leading investigations, digital forensics,…
Added 6 days ago
SAP Supply Chain and Finance Senior Analyst
Pembina Pipeline Corporation
Calgary, AB
…and processing facilities and an oil and natural gas liquids infrastructure and logistics business. Our operations along the hydrocarbon value chain allow us to offer a full state of…
Added 5 days ago
Cyber Security Analyst
Armstrong Fluid Technology
Toronto, ON
Full-time
In this role, you will serve as a frontline defender of our organization's digital assets, infrastructure, and sensitive data against an evolving landscape of cyber threats. You will be a…
Added 6 days ago
Cybersecurity Analyst
TEEMA
Edmonton, AB
Full-time
As part of the Computer, Networks and Infrastructure (CNI) team, under the guidance and direction of the CNI Manager, the IT Security Analyst will be responsible for participation of the…

CYBERWELL

Cyber Security Analyst

Calgary, AB, Canada
Greater Calgary Metropolitan Area, Canada

Job type: Full-time
Apply by: Oct 9, 2026
Experience: 2–4 years of experience in a SOC, incident response, or cybersecurity operations environment, with demonstrated experience performing advanced security investigations (Essential)
Posting language: English
Posted: Sep 9, 2026

Apply About employer

Applications open in a new tab.

Original job description

About the Company

CYBERWELL is the new name behind North America’s most trusted cybersecurity brands – Source44, Seekintoo, Cycura, and Proack Security. Now under one banner, we’re scaling our impact with a fresh vision, a stronger portfolio, and a renewed commitment to helping organizations build lasting resilience in today’s evolving threat landscape. In today’s threat landscape, complexity is the constant. At CYBERWELL, we’re built to help organizations not just keep up but get ahead. CYBERWELL is a cybersecurity company purpose built for scale, change, and the realities of modern enterprise. We deliver integrated solution that span the full cybersecurity lifecycle-from offensive security exposure management to GRC, architecture and engineering, threat intelligence, and 24/7 managed detection and response. We partner with enterprise leaders who are navigating regulatory pressure, evolving risk, and growing infrastructure. Whether it's a healthcare provider safeguarding patient data, a government agency defending critical systems, or a tech or financial firm scaling securely - our team helps unify strategy, reduce complexity, and strengthen cyber resilience. Why it matters: Cybersecurity isn't just a technical issue - it’s a business imperative. From compliance and operational uptime to reputation and trust, we help organizations protect what matters most, stay ahead of threats, and build the foundation for long-term success. We're not just another vendor. We're your cybersecurity partner - relentlessly focused on outcomes, backed by world-class talent, and obsessed with your success.

About the Role

The SOC Analyst – Tier 2 is a key escalation and incident response role within the CYBERWELL CYBERSOC. You will investigate complex security events across multiple client environments, validate and scope potential incidents, execute authorized containment actions, and provide clear technical guidance to Tier 1 analysts.

This role is well suited to an analyst who is comfortable working independently, making sound decisions under pressure, and moving beyond initial alert triage into deeper investigation and response. You will work across technologies including Microsoft Sentinel, Cortex XSOAR, EDR/XDR, network security platforms, and cloud environments while supporting government and highly regulated clients.

Following onboarding and training, this position will primarily support our night shift as part of CYBERWELL’s 24/7/365 security operations model. You will play an important role in strengthening overnight escalation coverage and ensuring complex incidents can be investigated and acted on without waiting for daytime resources.

Key Responsibilities:

Investigate escalated security alerts and incidents across SIEM, SOAR, EDR/XDR, identity, network, and cloud security platforms
Perform advanced investigation and correlation using logs, endpoint telemetry, threat intelligence, and other available data sources
Determine incident scope, severity, impact, and required response actions using sound technical judgment and client-specific procedures
Execute authorized containment and response actions, including host isolation, account or session containment, and other approved measures in accordance with client-specific SOPs
Own escalated cases through resolution, client escalation, or structured handoff, ensuring analysis and actions are complete and defensible
Act as an escalation point for Tier 1 analysts, providing investigative guidance, escalation review, and coaching to improve case quality
Maintain detailed, high-quality case documentation and produce clear client-facing notes describing findings, impact, actions taken, and next steps
Participate in incident calls and client interactions as a technical subject matter contributor when required
Maintain situational awareness across multiple concurrent incidents and client environments, including during overnight operations
Contribute to continuous improvement of playbooks, runbooks, detection fidelity, response procedures, and operational workflows

Qualifications:

2–4 years of experience in a SOC, incident response, or cybersecurity operations environment, with demonstrated experience performing advanced security investigations (Essential)
Experience in an MSSP or multi-tenant environment is strongly preferred
Hands-on experience with:
SIEM platforms and investigative query workflows (Microsoft Sentinel and KQL preferred)
SOAR platforms and response automation (Cortex XSOAR preferred)
EDR/XDR, identity, network security tools, and log analysis workflows

Working knowledge of:

TCP/IP networking, Windows/Linux security fundamentals, and authentication workflows
Common attack techniques, indicators of compromise, and incident response / containment practices
MITRE ATT&CK framework and practical application during investigation
Ability to work independently, prioritize concurrent incidents, and make sound escalation and containment decisions within defined authority
Strong written and verbal communication skills with an emphasis on clear, precise, and defensible analysis

Preferred Certifications:

CompTIA CySA+ or Security+
Microsoft SC-200, SC-100, SC-300, or SC-500 are preferred
ISC² SSCP, GIAC GCIH, or equivalent security operations / incident response certification

Work Requirements:

Participation in a 24/7/365 coverage model, with primary assignment to night shift following completion of onboarding and training
Training and onboarding may be completed on day or evening shifts before transition to the primary night-shift schedule
Must be a Canadian Citizen or Permanent Resident
Must be eligible to obtain and maintain required security clearances
Ability to operate effectively and independently in a high-volume environment, including periods with limited overnight supervision

Pay range and compensation package

The salary offered for this position falls within a specified salary range and will be determined based on a variety of factors, including but not limited to the candidate's experience, qualifications, skills, and the specific needs of the organization.

There are shift premiums for evening and night shifts included.

Benefits

CYBERWELL offers a comprehensive benefits package, including:

Life insurance
Accidental Death and Dismemberment (AD&D) insurance
Extended health and dental coverage
Long-term disability coverage

At WELL, we believe in fair and equitable compensation, and our goal is to offer a competitive salary that reflects the value and expertise of the selected candidate.

WELL is committed to supporting a diverse, inclusive, and accessible workplace. We welcome and celebrate the diversity of applicants and team members across ability, race, gender identity, sexual orientation, and perspective. We strive to create an inclusive workplace where differences are celebrated and fuel our success – this is the WELL Way!

WELL has been independently certified as a Great Place to Work® by Great Place to Work Institute® Canada, an achievement that reflects the company’s strong commitment to creating a workplace culture centered on trust, inclusivity, and employee well-being, aligning with its ‘Healthy Place to Work’ ESG strategy pillar. Want Read more about us: https://stories.well.company/

Apply About employer

More about this job

Responsibilities

Investigate complex security events and escalated alerts across multiple client environments to determine scope and impact. Execute containment actions and provide technical guidance to Tier 1 analysts while maintaining detailed case documentation.

Requirements

Requires 2–4 years of SOC or incident response experience, preferably within an MSSP environment. Candidates must be Canadian Citizens or Permanent Residents and be able to work the night shift.

Skills

Incident Response
SIEM
SOAR
EDR/XDR
Log Analysis
Threat Intelligence
KQL
TCP/IP Networking
Windows/Linux Security
MITRE ATT&CK Framework
Containment Actions
Case Documentation
Security Operations Center
Cloud Security
Identity Security
Network Security

Benefits

Life Insurance
Accidental Death and Dismemberment (AD&D) Insurance
Extended Health and Dental Coverage
Long-term Disability Coverage

Visa sponsorship

Not detected in the job text

Keywords

Microsoft Sentinel
Cortex XSOAR
KQL
EDR
XDR
MITRE ATT&CK
CompTIA CySA+
CompTIA Security+
Microsoft SC-200
Microsoft SC-100
Microsoft SC-300
Microsoft SC-500
ISC2 SSCP
GIAC GCIH
MSSP
SIEM
SOAR
Incident Response
Cybersecurity
Threat Intelligence
Network Security
Cloud Security
Log Analysis
Containment
SOC Tier 2
Cyber Resilience
GRC
Offensive Security
Managed Detection and Response

Report this job