Cybersecurity Analyst—SOC

We are hiring a Cybersecurity Analyst – SOC on behalf of a well-established organization in Montreal.

In your new role as a Cybersecurity Analyst – SOC, you will be responsible for establishing the company’s cybersecurity vision to improve security across stores, warehouses, the distribution center, and head office. You will work closely with the IT infrastructure team as well as the legal team and provide excellent customer service. In addition, this role requires delivering top expertise to ensure the operation, troubleshooting, and optimization of technological resources used at service points.

Key Accountabilities:

• Participate in defining the company’s cybersecurity vision and governance;
• Monitor the network and perform intrusion detection analysis using various network defence tools such as intrusion detection/prevention systems, firewalls, and host-based security systems;
• Detect threats based on logs and endpoints to identify and protect against threats from multiple sources;
• Correlate activity between assets (endpoints, network, applications) and environments (on-premises, cloud) to identify abnormal activity patterns;
• Review alerts and sensor data and document formal technical incident reports;
• Work with filtering and threat-hunting teams;
• Use Security Information and Event Management (SIEM) to manage/tune the system, create/manage detection content, and actively monitor alerts;
• Correlate network, cloud, and endpoint activity across environments to identify attacks and unauthorized use;
• Provide user assistance during incidents, including mitigation measures to contain activity and facilitate forensic analysis if needed;
• Perform security tests on computers before deployment to ensure safety;
• Provide Level II support and, when necessary, investigate security incidents to ensure complete resolution;
• Stay informed about emerging threats and vulnerabilities and remain active in security communities;
• Participate in documenting security elements following the implementation of new projects or security software;
• Develop and maintain standards, guides, and rules regarding the technological security of company systems and infrastructure;
• Act as administrator for installing, configuring, and maintaining security tools and applications;
• Advise development teams on secure application programming standards;
• Select modules for the “cybersecurity awareness” program for employees;
• Analyze security logs from various IT systems such as servers (AD, Exchange, etc.), firewalls, Anti-Spam, EDR, IDS/IPS, etc.

Job Requirements:

• Degree or Diploma in IT or IT security/Cybersecurity;
• Two (2) to five (5) years of IT experience in a similar role;
• Strong knowledge of Microsoft products (Windows 7, Windows 10, Office Suite 2007, 2010, and 2016);
• Good knowledge of Active Directory, AD security, and Office 365;
• Good knowledge of security tools (Firewall, Anti-Spam, IDS/IPS, EDR);
• Strong ability to analyze logs from various operating systems such as Windows, Linux, Unix, and security tools;
• Excellent problem-solving skills;
• Collaborative, autonomous, professional approach, and customer-service oriented;
• Demonstrates reliability, rigor, and flexibility;
• CISSP certification is an asset; and
• Ability to participate in a weekly rotating on-call schedule.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

#LI-DNI
#1126805 - Oleg Myaskovsky