Security Operations Center (SOC) Analyst
- Edmonton, AB, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Why this role matters
Our clients trust us to keep them secure and productive. As a SOC Analyst, you’ll monitor and remediate security alerts across multiple client environments, respond to cyber incidents, escalate effectively, and close the loop with clear documentation and Security RCAs. Reporting to the Director of Central Services, you’ll work closely with our Service Desk, NOC, Client Solutions, and Professional Services teams to uphold our security baseline, improve response processes, and reduce recurring support needs through proactive remediation and automation.
What You’ll Do
Location, Schedule & flexibility
This role is based in our Edmonton office and follows a hybrid work arrangement that combines in-office and work-from-home days. It also participates in scheduled after-hours and on-call rotations and occasional client maintenance windows.
What We Offer
Hybrid work arrangement, combining in-office and work-from-home-days. Extended health and dental coverage, life and disability insurance, Health & Wellness Spending Accounts, virtual healthcare, Employee & Family Assistance Program, and a Group Retirement Savings Plan.
Our clients trust us to keep them secure and productive. As a SOC Analyst, you’ll monitor and remediate security alerts across multiple client environments, respond to cyber incidents, escalate effectively, and close the loop with clear documentation and Security RCAs. Reporting to the Director of Central Services, you’ll work closely with our Service Desk, NOC, Client Solutions, and Professional Services teams to uphold our security baseline, improve response processes, and reduce recurring support needs through proactive remediation and automation.
What You’ll Do
- Remediate, monitor and triage alerts: Monitor the Security Queue, CW Automate, and security mailboxes. Classify and remediate general alerts, confirm business impact, create and assign tickets when required, escalate complex or critical alerts according to established procedures, and document every response and resolution in the ticketing system.
- CVE and vulnerability intake: Review security forums, message boards, community pages, and vendor press pages for imminent threats. Triage CVE vulnerability notifications by creating tickets and assigning them to NOC Analysts when necessary.
- Incident response: Identify the severity of each cyber incident, remediate standard incidents, and escalate major incidents to Expert Analysts according to the escalation process. During a major incident, provide support and guidance to the Tech Lead and Communicator. Complete a Security RCA for every standard and major cyber incident.
- Security tooling, standards and baselines: Help develop and regularly evaluate the Security Baseline for Northern Computer and all managed clients. Maintain efficient baseline auditing processes and security-product SOPs, complete semi-annual top-to-bottom security audits and remediate baseline issues, support security-tool deployments, and complete 60-day security check-ups following security projects.
- Security change coordination: Communicate security changes internally and collaborate with other departments to manage those changes effectively. Keep relevant documentation, calendars, and ticket notes current in real time, and promptly communicate schedule conflicts or outstanding work.
- Internal Cybersecurity support: Provide input to the Client Solutions and Professional Services teams to ensure that security standards and the Security Baseline are upheld. Support client security meetings by providing cybersecurity reports when required.
- Cross-team collaboration: Work closely with the Service Desk and NOC, communicate issues and scheduling conflicts promptly, and collaborate with other departments during wider incidents and security changes.
- Automation and continuous improvement: Find and use efficient or automated methods for recurring work, automate alert resolution whenever practical, and proactively reduce, simplify, or eliminate end-user support requests.
- Additional company support: As requested by the Director of Central Services, assist the Service Desk, support internal IT operations, and participate in project-based security work. Provide after-hours and on-call support as scheduled.
- Experienced MSP NOC/SOC professional: 3+ years of experience working in a NOC, SOC, or closely related security operations role within a managed service provider environment, with demonstrated experience triaging alerts across multiple client environments, responding to incidents, documenting outcomes, and escalating effectively.
- Tool awareness: Familiarity with EDR/AV, phishing simulators, basic SIEM concepts, and ticketing workflows (e.g., ConnectWise Manage/Automate).
- Methodical triage: Comfort applying priority rules, confirming impact, and escalating on time - under pressure and in afterhours rotations when needed.
- Documentation discipline: Clear ticket notes and postincident writeups; curiosity to turn fixes into repeatable standards.
- Education and professional development: A cybersecurity certificate, or a college or university certificate, diploma, or degree in cybersecurity or a related field, is preferred. You stay current on relevant threats, trends, tools, and security products.
- Experienced with Microsoft 365 security controls, identity hygiene (MFA/conditional access), and email compromise playbooks
- Basic scripting or workflow-automation experience, such as PowerShell or Rewst
- Hold or be working towards relevant industry certifications, such as CompTIA Security+, ISC2, or Microsoft security certifications
Location, Schedule & flexibility
This role is based in our Edmonton office and follows a hybrid work arrangement that combines in-office and work-from-home days. It also participates in scheduled after-hours and on-call rotations and occasional client maintenance windows.
What We Offer
Hybrid work arrangement, combining in-office and work-from-home-days. Extended health and dental coverage, life and disability insurance, Health & Wellness Spending Accounts, virtual healthcare, Employee & Family Assistance Program, and a Group Retirement Savings Plan.
More about this job
Responsibilities
Monitor, triage, and remediate security alerts across client environments; respond to incidents, escalate major events, and document resolutions and root cause analyses. Maintain security baselines and tooling, coordinate security changes, support client and internal teams, and automate recurring work to improve response efficiency.
Requirements
Requires at least three years of experience in a NOC, SOC, or related security operations role in a managed service provider environment, including alert triage, incident response, documentation, and escalation. Familiarity with EDR/AV, basic SIEM concepts, ticketing workflows, Microsoft 365 security controls, and identity hygiene is expected; cybersecurity education or certification is preferred.
Skills
- Security Alert Monitoring and Triage
- Incident Response
- Vulnerability Management
- Security Baseline Auditing
- Security Documentation
- Security Root Cause Analysis
- Escalation Management
- Microsoft 365 Security
- Identity and Access Management
- Multi-Factor Authentication
- Conditional Access
- Endpoint Detection and Response
- Security Information and Event Management
- PowerShell
- Workflow Automation
- Cross-Team Collaboration
Benefits
- Hybrid Work Arrangement
- Extended Health Coverage
- Dental Coverage
- Life Insurance
- Disability Insurance
- Health and Wellness Spending Accounts
- Virtual Healthcare
- Employee and Family Assistance Program
- Group Retirement Savings Plan
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Customer Service & Support
Keywords
- Security Operations Center
- SOC
- NOC
- Managed Service Provider
- Security Alert Triage
- Cyber Incident Response
- CVE
- Vulnerability Management
- Security Baseline
- Security Audits
- Security Root Cause Analysis
- EDR
- Antivirus
- SIEM
- ConnectWise Manage
- ConnectWise Automate
- Microsoft 365 Security
- Multi-Factor Authentication
- Conditional Access
- Email Compromise Playbooks
- PowerShell
- Rewst
- CompTIA Security+
- ISC2
- Security Tool Deployment
- Ticketing Workflows
- Automation
- After-Hours Support
- On-Call Support