Closed listing
IT Secuity analyst
- Montreal, QC, Canada
Contract
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Contract
- Closing date
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
- The client is looking for an IT security analyst for its SOC, positioned at level 2: alerts reach this person already escalated by level 1, and the person in turn acts as the technical escalation point for those analysts.
- The work centres on investigation: qualifying phishing, account compromise, malware or lateral movement cases, correlating events across several platforms, then enriching them with logs, indicators of compromise and threat intelligence.
- The person determines verdict, severity and impact, then recommends or initiates first measures according to established processes, with incident response remaining initial and carried out with other teams.
- The form title specifies no level, while the full set of responsibilities describes a level 2 role.
- The Talents and qualifications section is empty: no degree, certification, language or named tool is required, so assessment rests entirely on the activity profile.
- Target candidate: a QA professional with at least 10 years in IT, including 5 years in testing, who has coordinated testing within agile teams and uses JIRA, XRAY, Cypress and Playwright in recent mandates.
- Group insurance exposure or an integration project will set apart otherwise equal candidates.
Requirements
Required:
- Analysis and qualification of escalated alerts (phishing, account compromise, malware, lateral movement)
- Event correlation (SIEM, XDR, EDR, identity, email, network, cloud)
- Alert enrichment (logs, indicators of compromise, threat intelligence)
- Determination of verdict, severity, potential impact and required actions
- Initial mitigation, containment or escalation measures, recommended or initiated per processes
- Documentation of investigations, findings, decisions and actions
- First-level technical analysis of endpoint and network logs and artefacts
- Support and coaching of level 1 SOC analysts on complex cases
- Improvement of detection rules, investigation queries, runbooks and playbooks
- Use of approved AI and automation tools (triage, enrichment, documentation)
More about this job
Responsibilities
Investigate and qualify escalated SOC alerts, correlate and enrich evidence across security platforms, and determine incident verdict, severity, impact, and appropriate actions. Recommend or initiate initial mitigation and escalation measures, document investigations, support level 1 analysts, and improve detection rules, queries, runbooks, and playbooks.
Requirements
The role requires experience analyzing escalated security alerts, correlating events across SIEM, XDR, EDR, identity, email, network, and cloud sources, and enriching investigations with logs, indicators of compromise, and threat intelligence. The posting specifies no required degree, certification, language, or named tool; it describes a level 2 SOC role and emphasizes technical analysis, documentation, analyst support, and process-based response.
Skills
- Security Alert Investigation
- Phishing Analysis
- Account Compromise Analysis
- Malware Analysis
- Lateral Movement Detection
- Event Correlation
- SIEM
- XDR
- EDR
- Log Analysis
- Threat Intelligence
- Incident Response
- Incident Documentation
- SOC Analyst Coaching
- Detection Rule Improvement
- Security Automation
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
Keywords
- SOC
- Level 2
- Escalated Alerts
- Phishing
- Account Compromise
- Malware
- Lateral Movement
- SIEM
- XDR
- EDR
- Identity Security
- Email Security
- Network Security
- Cloud Security
- Logs
- Indicators Of Compromise
- Threat Intelligence
- Incident Response
- Mitigation
- Containment
- Detection Rules
- Investigation Queries
- Runbooks
- Playbooks
- AI Tools
- Automation