Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Cyber SOC Analyst SIEM Incident Response & Threat Intelligence

Skills: MSS Security Operations Center (SOC)

Experience Required: 10 & Above

Location: Toronto ON Hybrid (3 Days WFO)

Role Description

Core Qualifications (Education and Experience)

• Undergraduate degree or college diploma in related field.
  
• 5 years of relevant experience.
  
• Experience managing and deploying IT infrastructure or cybersecurity technologies preferred.
  
• Possess relevant cybersecurity certifications.
  
• Strong technical capabilities in the areas of firewalls anti-virus content filtering SIEM threat intelligence security orchestration and automation vulnerability management and cloud security.
  
• Familiarity with SIEM EDR DLP and other security technologies.
  
• Strong written and verbal communication skills.
  

Core Accountabilities

• Collaborate to solve complex security problems as part of a highly dynamic close-knit team of dedicated security professionals.
  
• Manage the effective response to security-related incidents in accordance with the established incident response framework.
  
• Analyze manage investigate and document alerts from various sources such as logs and security tools.
  
• Deploy and manage information security controls for assigned areas.
  
• Collect relevant data to support the preparation of the information security dashboard.
  
• Participate in the administration of information security-related governance activities.
  
• Perform real-time monitoring of third-party threat intelligence feeds forums and mailing lists to gather information on vulnerabilities exploits and threat actors applicable to the fund.
  
• Produce threat intelligence reports to support operational and strategic security planning workstreams.
  
• Assess security incident trend data to determine systemic operational risks and then support the development of solutions to mitigate risks.
  
• Conduct information security risk assessments recording issues in the risk register and driving mitigating actions.
  
• Coordinate the remediation of audit and/or self-identified control deficiencies.
  
• Act as a security advisor on various security risks and issues to various departments.