Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Skills: MSS – Security Operations Center (SOC)

Experience Required: 10 & Above

Location: Toronto, ON – Hybrid (3 Days WFO)

Role Description

Core Qualifications (Education and Experience)

• Undergraduate degree or college diploma in related field.
  
• 5+ years of relevant experience.
  
• Experience managing and deploying IT infrastructure or cybersecurity technologies preferred.
  
• Possess relevant cybersecurity certifications.
  
• Strong technical capabilities in the areas of firewalls, anti-virus, content filtering, SIEM, threat intelligence, security orchestration and automation, vulnerability management and cloud security.
  
• Familiarity with SIEM, EDR, DLP, and other security technologies.
  
• Strong written and verbal communication skills.
  

Core Accountabilities

• Collaborate to solve complex security problems as part of a highly dynamic, close-knit team of dedicated security professionals.
  
• Manage the effective response to security-related incidents in accordance with the established incident response framework.
  
• Analyze, manage, investigate, and document alerts from various sources such as logs and security tools.
  
• Deploy and manage information security controls for assigned areas.
  
• Collect relevant data to support the preparation of the information security dashboard.
  
• Participate in the administration of information security-related governance activities.
  
• Perform real-time monitoring of third-party threat intelligence feeds, forums, and mailing lists to gather information on vulnerabilities, exploits, and threat actors applicable to the fund.
  
• Produce threat intelligence reports to support operational and strategic security planning workstreams.
  
• Assess security incident trend data to determine systemic operational risks and then support the development of solutions to mitigate risks.
  
• Conduct information security risk assessments, recording issues in the risk register and driving mitigating actions.
  
• Coordinate the remediation of audit and/or self-identified control deficiencies.
  
• Act as a security advisor on various security risks and issues to various departments.