Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Skills: MSS – Security Operations Center (SOC)

Experience Required: 10 & Above

Location: Toronto, ON – Hybrid (3 Days WFO)

Role Description

Core Qualifications (Education and Experience)

• Undergraduate degree or college diploma in related field.
• 5+ years of relevant experience.
• Experience managing and deploying IT infrastructure or cybersecurity technologies preferred.
• Possess relevant cybersecurity certifications.
• Strong technical capabilities in the areas of firewalls, anti-virus, content filtering, SIEM, threat intelligence, security orchestration and automation, vulnerability management and cloud security.
• Familiarity with SIEM, EDR, DLP, and other security technologies.
• Strong written and verbal communication skills.

Core Accountabilities

• Collaborate to solve complex security problems as part of a highly dynamic, close-knit team of dedicated security professionals.
• Manage the effective response to security-related incidents in accordance with the established incident response framework.
• Analyze, manage, investigate, and document alerts from various sources such as logs and security tools.
• Deploy and manage information security controls for assigned areas.
• Collect relevant data to support the preparation of the information security dashboard.
• Participate in the administration of information security-related governance activities.
• Perform real-time monitoring of third-party threat intelligence feeds, forums, and mailing lists to gather information on vulnerabilities, exploits, and threat actors applicable to the fund.
• Produce threat intelligence reports to support operational and strategic security planning workstreams.
• Assess security incident trend data to determine systemic operational risks and then support the development of solutions to mitigate risks.
• Conduct information security risk assessments, recording issues in the risk register and driving mitigating actions.
• Coordinate the remediation of audit and/or self-identified control deficiencies.
• Act as a security advisor on various security risks and issues to various departments.