SOC Analyst
- Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Posting language
- English
- Posted
Original job description
Key Responsibilities
- Monitor security alerts and events through SIEM tools.
- Identify, investigate, and analyze potential security threats.
- Monitor network traffic, endpoints, and system activities.
- Perform initial analysis and classification of security incidents.
- Investigate phishing emails, malware alerts, and suspicious activities.
- Analyze security logs and identify unusual patterns.
- Escalate critical security incidents to senior security teams.
- Support incident response and threat mitigation activities.
- Perform vulnerability assessments and security monitoring.
- Maintain incident reports and security documentation.
- Follow established security policies and procedures.
- Collaborate with IT and cybersecurity teams to improve security operations.
Required Technical Skills
- Basic knowledge of cybersecurity concepts and principles.
- Understanding of networking protocols such as TCP/IP, DNS, HTTP, and HTTPS.
- Knowledge of SIEM tools such as Splunk, IBM QRadar, or Microsoft Sentinel.
- Understanding of firewalls, IDS, and IPS.
- Knowledge of Windows and Linux operating systems.
- Basic understanding of malware analysis and phishing attacks.
- Familiarity with endpoint detection and response (EDR) tools.
- Understanding of security incident management and threat intelligence.
- Knowledge of vulnerability management concepts.
- Familiarity with MITRE ATT&CK framework.
Required Soft Skills
- Strong analytical and problem-solving abilities.
- Attention to detail and critical thinking.
- Good verbal and written communication skills.
- Ability to work under pressure and handle security incidents.
- Teamwork and collaboration skills.
- Willingness to learn emerging cybersecurity technologies.
Preferred Qualifications
- Experience working in a Security Operations Center (SOC).
- Knowledge of threat hunting and security incident investigation.
- Familiarity with EDR and XDR solutions.
- Understanding of vulnerability assessment tools.
- Basic knowledge of scripting using Python or PowerShell.
- Familiarity with security frameworks such as NIST and ISO 27001.
- Understanding of incident response procedures.
More about this job
Responsibilities
Monitor security alerts, network traffic, endpoints, and system activity; investigate and classify potential incidents such as phishing, malware, and suspicious behavior. Escalate critical incidents, support response and mitigation, conduct vulnerability assessments, maintain documentation, and collaborate with IT and cybersecurity teams.
Requirements
Requires basic cybersecurity knowledge, familiarity with networking, SIEM tools, firewalls, operating systems, EDR, incident management, threat intelligence, and vulnerability management. Also requires analytical, communication, and teamwork skills; SOC experience, threat hunting, scripting, and knowledge of NIST or ISO 27001 are preferred.
Skills
- Security Information and Event Management (SIEM)
- Security Incident Analysis
- Threat Investigation
- Network Traffic Monitoring
- Security Log Analysis
- Incident Response
- Vulnerability Assessment
- TCP/IP
- DNS
- HTTP
- HTTPS
- Firewalls
- Intrusion Detection and Prevention Systems (IDS/IPS)
- Windows and Linux
- Endpoint Detection and Response (EDR)
- MITRE ATT&CK
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
Keywords
- Cybersecurity
- Security Operations Center (SOC)
- Security Information and Event Management (SIEM)
- Splunk
- IBM QRadar
- Microsoft Sentinel
- TCP/IP
- DNS
- HTTP
- HTTPS
- Firewalls
- Intrusion Prevention Systems (IPS)
- Windows
- Linux
- Malware Analysis
- Phishing
- Endpoint Detection and Response (EDR)
- Extended Detection and Response (XDR)
- Threat Intelligence
- Vulnerability Management
- MITRE ATT&CK
- Threat Hunting
- Python
- PowerShell
- NIST
- ISO 27001
- Incident Response