Security Operations Analyst
- Mississauga, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Primary focus: Security monitoring, threat detection, investigation, response, and operational automation.
What this person should be able to do
- Monitor security events and support incident response.
- Develop and improve threat detection and investigation workflows.
- Work with SIEM and SOAR platforms.
- Develop playbooks and automation for repeatable response activities.
- Support endpoint and cloud security operations.
Key technical / capability areas
- SIEM and SOAR platforms.
- Threat detection and investigation.
- Incident response workflows.
- Playbook development and automation.
- Endpoint and cloud security operations.
What strong candidates will demonstrate
- Demonstrates analytical depth during investigations.
- Can tune detection and response processes to reduce noise and improve speed.
- Looks for opportunities to automate repeatable operational work.
More about this job
Responsibilities
Monitor security events and support incident response, while developing and improving threat detection and investigation workflows using SIEM and SOAR platforms. Create playbooks and automation for repeatable response activities, and support endpoint and cloud security operations.
Requirements
Candidates should be capable of security monitoring, threat investigation, incident response, and working with SIEM and SOAR platforms. Strong candidates demonstrate analytical depth, improve detection and response processes to reduce noise and increase speed, and identify opportunities to automate recurring work.
Skills
- Security Monitoring
- Threat Detection
- Security Investigations
- Incident Response
- SIEM
- SOAR
- Detection Workflow Development
- Response Workflow Development
- Playbook Development
- Operational Automation
- Endpoint Security
- Cloud Security
- Detection Tuning
- Analytical Investigation
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
Keywords
- Security Operations
- Security Monitoring
- Threat Detection
- Threat Investigation
- Incident Response
- SIEM
- SOAR
- Detection Workflows
- Investigation Workflows
- Response Workflows
- Playbooks
- Operational Automation
- Endpoint Security
- Cloud Security
- Detection Tuning
- Security Events