Posted 4 days ago
Security Analyst, SOC (Tier 2)
@ Insight Global
Ontario
SIGNALS
Overview
Insight Global is hiring a contract Cyber Security Analyst for its security team, a hands-on Tier 2 SOC role owning incident triage, response and MDR provider management. The work centres on the Microsoft security stack (Defender, Sentinel, Entra ID, Intune, Azure) with some application security and DevSecOps. Required: 2–3+ years of SOC or incident-response experience and the SC-200 certification.
Pay:
From $57 an hour
Responsibilities:
- Manage Tier 2 security incident queue and containment
- Act as escalation point for MDR and service desk alerts
- Serve as day-to-day technical contact for MDR provider
- Investigate alerts and perform threat hunting in Microsoft ecosystem
- Identify monitoring gaps and recommend improvements
Requirements summary:
- 2–3+ years hands-on SOC or incident-response experience
- Strong Microsoft Defender, Sentinel, Azure, Entra ID and Intune knowledge
- SIEM and KQL familiarity
- Experience working with an outsourced MDR or MSSP
- Microsoft SC-200 certification
Tools & skills
Microsoft Defender XDRMicrosoft SentinelAzureMicrosoft Entra IDMicrosoft IntuneMicrosoft PurviewKQLSIEM
Source and dates
Source type not verified · insightglobal
- Employer posting date
- 2026-11-03
- First seen by our source
- 2026-11-03
- Source record updated
- 2026-11-03
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Mid level |
| Department | Software development |
| Experience | 2+ years |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | Microsoft SC-200 |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Insight Global
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
Insight Global is a talent, consulting, and AI company.
Full company description
Insight Global is an international talent and consulting company that delivers business outcomes in an ever-changing world. We obsess over solving problems and building solutions that move our customers further, faster. With access to top talent in more than 50 countries, our tech-enabled recruiters can build teams quickly. Our technical experts across Cloud, AI, Data, Enterprise Operations, and Applied Engineering deliver solutions tailored to each customer’s needs. As those needs evolve, so do we. As we evolve, though, we stay true to our purpose: to develop people personally, professionally, and financially so they can be the light to the world around them. It shows up in everything we do, from investing in our people to delivering results for our customers to making a meaningful impact in our communities.
- LinkedIn followers
- 5,364,002
- People associated on LinkedIn
- 20,105
- Reported office locations
- 1224 Hammond Drive, Suite 1500, Atlanta, Georgia 30346, US
- 100 King St W, Suite 5210, Toronto, Ontario M5X 1A9, CA
- 1901 6th Ave N, Suite 1610, Birmingham, Alabama 35203, US
- 2325 E Camelback Rd, Suite 800, Phoenix, Arizona 85016, US
- 5001 W Founders Way, Suite 100, Rogers, Arkansas 72758, US
- 609 Granville St, Suite 540, Vancouver, British Columbia V7Y 1H4, CA
- 401 W A St, Suite 2075, San Diego, California 92101, US
- 400 Capitol Mall, Suite 2640, Sacramento, California 95814, US
- 3161 Michelson Dr, Suite 1150, Irvine, California 92612, US
- 6601 Center Dr W, 5th Floor, Suite J, Los Angeles, California 90045, US
- 33 New Montgomery St, Suite 1700, San Francisco, California 94105, US
- 50 W San Fernando St, Suite 900, San Jose, California 95113, US
- 707 17th St, Suite 4100, Denver, Colorado 80202, US
- 185 Asylum St, City Place 2, 15th Floor, Hartford, Connecticut 06103, US
- 4 Star Point, Suite 302, Stamford, Connecticut 06902, US
- 1001 19th St N, Suite 1000, Arlington, Virginia 22209, US
- 5200 Town Center Circle, Boca Center, Tower 1, Suite 500, Boca Raton, Florida 33486, US
- 333 S Garland Ave, Suite 1200, Orlando, Florida 32801, US
- 3600 Midtown Dr, Suite 1000, Tampa, Florida 33607, US
- 5555 Gate Pkwy, Suite 220, Jacksonville, Florida 32256, US
- 333 SE 2nd Ave, Suite 3400, Miami, Florida 33131, US
- 353 N Clark St, 2200, Chicago, Illinois 60654, US
- 820 Massachusetts Ave, Suite 1360, Indianapolis, Indiana 46204, US
- 666 Walnut St, Suite 1600, Des Moines, Iowa 50309, US
- 101 South 5th Street, Suite 1800, Louisville, KY 40202, US
- 100 E Pratt St, Suite 2530, Baltimore, Maryland 21202, US
- 33 Arch St, Suite 1120, Boston, Massachusetts 02110, US
- 333 Bridge St NW, 13th Floor, Suite 1301, Grand Rapids, Michigan 49504, US
- 400 Renaissance Dr, Suite 3500, Detroit, Michigan 48243, US
- 1601 Utica Ave S, Suite 800, St Louis Park, Minnesota 55416, US
- 231 S Bemiston Ave, Suite 100, St Louis, Missouri 63105, US
- 1100 Walnut St, Suite 1250, Kansas City, Missouri 64106, US
- 6700 Mercy Rd, Suite 300, Omaha, Nebraska 68106, US
- 10845 Griffith Peak Dr, Suite 200A, Las Vegas, Nevada 89135, US
- 1260 Headquarters Plaza, West Tower, 6th Floor, Morristown, New Jersey 07960, US
- 250 Park Ave, Suite 1100, New York, New York 10177, US
- 201 N Tryon St, Suite 2150, Charlotte, North Carolina 28202, US
- 4208 Six Forks Rd, Suite 840, Raleigh, North Carolina 27609, US
- 250 E 5th St, Suite 1400, Cincinnati, Ohio 45202, US
- 127 Public Sq, Suite 1500, Cleveland, Ohio 44114, US
- 210 Park Ave, Suite 1020, Oklahoma City, Oklahoma 73102, US
- 111 SW 5th Ave, Suite 3850, Portland, Oregon 97204, US
- 1 PPG Pl, Suite 2000, Pittsburgh, Pennsylvania 15222, US
- 1600 Market St, Suite 2900, Philadelphia, Pennsylvania 19103, US
- 200 N Warner Rd, Oak Hill Plaza, Suite 440, King of Prussia, Pennsylvania 19406, US
- 1222 Demonbreun St, Suite 1100, Nashville, Tennessee 37203, US
- 401 Congress Ave, Suite 1600, Austin, Texas 78701, US
- 2100 McKinney Ave, Suite 1400, Dallas, Texas 75201, US
- 111 W. Houston Street, Suite 2005, San Antonio, Texas 78205, US
- 2200 Post Oak Blvd, Suite 1225, Houston, Texas 77056, US
- 111 South Main, Suite 2250, Salt Lake City, Utah 84111, US
- 1021 E Cary St, Suite 1850, Richmond, Virginia 23219, US
- 4500 Main Street, Suite 210, Virginia Beach, Virginia 23462, US
- 2323 Elliott Avenue, Seattle, Washington 98121, US
- 833 E Michigan St, Suite 650, Milwaukee, Wisconsin 53202, US
- 330 Rush Alley, Suite 850, Columbus, Ohio 43215, US
- 700 2nd Street SW Calgary, Suite 3100, Calgary , Alberta T2P 2W2, CA
- 997 Morrison Drive 6th Floor, suite 602, Charleston , South Carolina 29403, US
- 15 S Main St, Suite 500, Greenville , South Carolina 29601, US
- 6815 Poplar Ave, Germantown, Tennessee 38138, US
- 201 Saint Charles Ave, Suite 2405, New Orleans, Louisiana 70170, US
- 200 Westside Sq, Suite 500, Huntsville, Alabama 35801, US
- 17 Saint Helen's Place, 4th Floor, London, England EC3A 6DG, GB
- 40 S Palafox St, Suite 500, Pensacola, Florida 32502, US
- 1100 W Idaho St, Suite 310, Boise, Idaho 83702, US
- 1110 Market St, Suite 215, Chattanooga, Tennessee 37402, US
- 640 Taylor St, 14th floor, Fort Worth, Texas 76102, US
- 99 Bank St, Suite 1002, Ottawa, Ontario K1P 6B9, CA
- 345 King St, Suite 202, Kitchener, Ontario N2G 1B8, CA
- Business categories
- Content Marketing
- Small and Medium Businesses
- Podcast
- Accounting
- Finance
- Employment
- Consulting
- Business Development
- Education
- Recruiting
- Sales
- Professional Services
- Public Relations
- Staffing Agency
- Social Media Management
- Human Resources
- Information Technology
- Photography
- Creative Agency
- Marketing
- Career Planning
- Government
- Business consulting
- Management and consulting
- Other recorded names
- Insight Global
- Specialties
- Consulting
- Talent Services
- Staffing
- and International Staffing
- Profile identifies a recruitment agency
- Yes
- Reported total investment
- 0
Currency and observation date were not supplied; this is not a current valuation or a funding round.
Insight Global is an international talent and consulting company that delivers business outcomes in an ever-changing world. We obsess over solving problems and building solutions that move our customers further, faster. With access to top talent in more than 50 countries, our tech-enabled recruiters can build teams quickly. Our technical experts across Cloud, AI, Data, Enterprise Operations, and Applied Engineering…
| Field | Value |
|---|---|
| Industry | Business Consulting and Services |
| Company size | 1,001-5,000 employees |
| Headquarters | Atlanta, Georgia |
| Organization type | Privately Held |
| Year founded | 2001 |
| Specialties | ConsultingTalent ServicesStaffingand International Staffing |
| Open jobs on Jobsy | 273 |
| View page |
Job description
Required Skills & Experience
2–3+ years of hands-on cybersecurity experience, ideally within a SOC, enterprise security operations or incident-response environment.
Demonstrated experience investigating and responding to security incidents from initial alert through resolution.
Experience working with an outsourced MDR or MSSP and handling security alerts/escalations.
Strong foundational knowledge of the Microsoft security stack, particularly:
Microsoft Defender
Microsoft Sentinel
Azure
Entra ID
Intune
Understanding of SIEM technologies and security monitoring concepts.
Familiarity with KQL or similar security-query languages.
Understanding of endpoint, network, cloud and application security events.
Exposure to application security and/or DevSecOps concepts, particularly security logging and monitoring.
Ability to identify gaps in security tooling, monitoring or processes and recommend improvements.
Strong ownership and accountability with the ability to operate independently.
Strong written and verbal communication skills with the ability to communicate incidents to both technical and non-technical stakeholders.
Microsoft SC-200 (Security Operations Analyst)
Nice to Have Skills & Experience
Nice to Have
Experience working with Arctic Wolf or another MDR platform.
Experience with Microsoft Sentinel configuration, connectors or analytics rules.
Microsoft Purview / Data Loss Prevention experience.
Application security experience with WordPress, .NET and/or Linux environments.
Azure application and infrastructure security experience.
Exposure to GitHub or Azure DevOps security tooling, including code scanning, dependency scanning and secrets management.
Experience within manufacturing, distribution, logistics or another 24-hour operational environment.
Certifications
Additional certifications considered an asset:
Microsoft AZ-500
Microsoft SC-100
CompTIA Security+ or CySA+
GIAC GCIH / GCIA
Job Description
Insight Global is looking for a hands-on Cyber Security Analyst to join a growing security team. This individual will play a key role in day-to-day security operations, incident response, MDR provider management, and the continued maturation of the organization's security program.
The successful candidate will have a strong SOC / incident response background and hands-on experience within the Microsoft security ecosystem, including Defender, Azure, Sentinel, Entra ID, and Intune. This person should be comfortable taking ownership of security incidents, working with an outsourced MDR provider, identifying gaps in monitoring and tooling, and helping move the security practice toward a more mature future state.
This is not a governance-focused role. The ideal candidate is technically curious, accountable, and capable of looking beyond individual tickets to identify opportunities to improve the overall security environment.
Key Responsibilities
Incident Response & Security Operations
Own and manage the Tier 2 security incident queue, including triage, prioritization, investigation, containment, and closure.
Manage approximately 5–7 day-to-day security tickets/incidents, while using additional capacity to improve SOC processes and security capabilities.
Act as an escalation point for alerts generated by the MDR provider and internal service desk.
Determine the validity and business impact of security incidents and escalate critical issues appropriately.
Coordinate containment activities with IT and infrastructure teams, including account disabling, endpoint isolation and blocking.
Maintain clear incident documentation, response playbooks and operational metrics.
Identify gaps in monitoring, alerting and incident-response processes and recommend improvements.
MDR / MSSP Management
Act as the day-to-day technical contact for the organization's Managed Detection and Response (MDR) provider.
Review and challenge MDR escalations to ensure alerts are actionable and meet agreed-upon SLAs.
Track MDR recommendations and incidents through resolution.
Validate monitoring and tooling coverage across endpoints, network, cloud and applications.
Help measure MDR performance and identify opportunities to mature the relationship and security practice.
Microsoft Security & Cloud
Work hands-on across the Microsoft security ecosystem, including:
Microsoft Defender XDR
Microsoft Sentinel
Microsoft Entra ID
Microsoft Intune
Microsoft Purview / DLP
Azure security tooling
Perform security investigations, alert analysis and threat hunting.
Review risky sign-ins, device compliance, endpoint activity and cloud security events.
Support Sentinel capabilities including data connectors, analytics rules, workbooks and KQL-based investigations.
Assist with the organization's continued consolidation and maturation of its Microsoft security environment.
Application Security & DevSecOps
Partner with infrastructure and application-development teams to ensure sufficient security monitoring exists across both infrastructure and application layers.
Understand differences in security monitoring requirements across technologies such as Linux, .NET and WordPress applications.
Review security requirements for Azure-hosted workloads and web applications.
Support secure software-development practices such as code scanning, dependency scanning, secrets management and application logging.
Help identify gaps in application-layer monitoring and recommend appropriate controls and alerts.
Contribute to incident-response playbooks for threats including phishing, compromised accounts, ransomware precursors and web application attacks.
We will use AI to search and screen candidates.
2–3+ years of hands-on cybersecurity experience, ideally within a SOC, enterprise security operations or incident-response environment.
Demonstrated experience investigating and responding to security incidents from initial alert through resolution.
Experience working with an outsourced MDR or MSSP and handling security alerts/escalations.
Strong foundational knowledge of the Microsoft security stack, particularly:
Microsoft Defender
Microsoft Sentinel
Azure
Entra ID
Intune
Understanding of SIEM technologies and security monitoring concepts.
Familiarity with KQL or similar security-query languages.
Understanding of endpoint, network, cloud and application security events.
Exposure to application security and/or DevSecOps concepts, particularly security logging and monitoring.
Ability to identify gaps in security tooling, monitoring or processes and recommend improvements.
Strong ownership and accountability with the ability to operate independently.
Strong written and verbal communication skills with the ability to communicate incidents to both technical and non-technical stakeholders.
Microsoft SC-200 (Security Operations Analyst)
Nice to Have Skills & Experience
Nice to Have
Experience working with Arctic Wolf or another MDR platform.
Experience with Microsoft Sentinel configuration, connectors or analytics rules.
Microsoft Purview / Data Loss Prevention experience.
Application security experience with WordPress, .NET and/or Linux environments.
Azure application and infrastructure security experience.
Exposure to GitHub or Azure DevOps security tooling, including code scanning, dependency scanning and secrets management.
Experience within manufacturing, distribution, logistics or another 24-hour operational environment.
Certifications
Additional certifications considered an asset:
Microsoft AZ-500
Microsoft SC-100
CompTIA Security+ or CySA+
GIAC GCIH / GCIA
Job Description
Insight Global is looking for a hands-on Cyber Security Analyst to join a growing security team. This individual will play a key role in day-to-day security operations, incident response, MDR provider management, and the continued maturation of the organization's security program.
The successful candidate will have a strong SOC / incident response background and hands-on experience within the Microsoft security ecosystem, including Defender, Azure, Sentinel, Entra ID, and Intune. This person should be comfortable taking ownership of security incidents, working with an outsourced MDR provider, identifying gaps in monitoring and tooling, and helping move the security practice toward a more mature future state.
This is not a governance-focused role. The ideal candidate is technically curious, accountable, and capable of looking beyond individual tickets to identify opportunities to improve the overall security environment.
Key Responsibilities
Incident Response & Security Operations
Own and manage the Tier 2 security incident queue, including triage, prioritization, investigation, containment, and closure.
Manage approximately 5–7 day-to-day security tickets/incidents, while using additional capacity to improve SOC processes and security capabilities.
Act as an escalation point for alerts generated by the MDR provider and internal service desk.
Determine the validity and business impact of security incidents and escalate critical issues appropriately.
Coordinate containment activities with IT and infrastructure teams, including account disabling, endpoint isolation and blocking.
Maintain clear incident documentation, response playbooks and operational metrics.
Identify gaps in monitoring, alerting and incident-response processes and recommend improvements.
MDR / MSSP Management
Act as the day-to-day technical contact for the organization's Managed Detection and Response (MDR) provider.
Review and challenge MDR escalations to ensure alerts are actionable and meet agreed-upon SLAs.
Track MDR recommendations and incidents through resolution.
Validate monitoring and tooling coverage across endpoints, network, cloud and applications.
Help measure MDR performance and identify opportunities to mature the relationship and security practice.
Microsoft Security & Cloud
Work hands-on across the Microsoft security ecosystem, including:
Microsoft Defender XDR
Microsoft Sentinel
Microsoft Entra ID
Microsoft Intune
Microsoft Purview / DLP
Azure security tooling
Perform security investigations, alert analysis and threat hunting.
Review risky sign-ins, device compliance, endpoint activity and cloud security events.
Support Sentinel capabilities including data connectors, analytics rules, workbooks and KQL-based investigations.
Assist with the organization's continued consolidation and maturation of its Microsoft security environment.
Application Security & DevSecOps
Partner with infrastructure and application-development teams to ensure sufficient security monitoring exists across both infrastructure and application layers.
Understand differences in security monitoring requirements across technologies such as Linux, .NET and WordPress applications.
Review security requirements for Azure-hosted workloads and web applications.
Support secure software-development practices such as code scanning, dependency scanning, secrets management and application logging.
Help identify gaps in application-layer monitoring and recommend appropriate controls and alerts.
Contribute to incident-response playbooks for threats including phishing, compromised accounts, ransomware precursors and web application attacks.
We will use AI to search and screen candidates.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.