Job Description

Job Description: Cyber Security Operations Center (SOC) Analyst responsible for monitoring, investigating, and responding to security incidents while supporting threat intelligence, risk management, security governance, and operational cybersecurity initiatives.

Location: Toronto, ON - Hybrid (2-3 Days WFO)

Contract Duration: 6-12 Month Contract

Key Responsibilities

• Monitor, analyze, investigate, and respond to security incidents in accordance with established incident response frameworks.
• Perform real-time monitoring and analysis of alerts generated by SIEM, EDR, DLP, and other security platforms.
• Investigate security events, threats, vulnerabilities, and suspicious activities across enterprise environments.
• Deploy, manage, and maintain information security controls and cybersecurity technologies.
• Collect and analyze security metrics to support information security dashboards and reporting.
• Participate in information security governance, compliance, and operational security activities.
• Monitor third-party threat intelligence feeds, forums, and security advisories for emerging threats and vulnerabilities.
• Produce threat intelligence reports to support operational and strategic security planning.
• Analyze incident trends to identify systemic security risks and recommend mitigation strategies.
• Conduct information security risk assessments and maintain risk registers.
• Coordinate remediation activities for audit findings and identified control deficiencies.
• Act as a security advisor to business and technology teams on cybersecurity risks and controls.
• Collaborate with security teams, infrastructure teams, and stakeholders to improve the organization's security posture.

Core Qualifications

• Undergraduate degree or College Diploma in a related field.
• 5+ years of cybersecurity, SOC, or information security experience.
• Experience managing, supporting, or deploying cybersecurity and IT infrastructure technologies.
• Relevant cybersecurity certifications are preferred.
• Strong experience with:
• Security Operations Center (SOC)
• Security Incident Response
• Threat Intelligence
• Vulnerability Management
• Cloud Security
• Strong knowledge of:
• Firewalls
• Anti-Virus Solutions
• Content Filtering Technologies
• SIEM Platforms
• Security Orchestration & Automation
• Experience working with:
• SIEM
• EDR
• DLP
• Threat Detection Tools
• Strong understanding of security monitoring, alert triage, and incident investigation processes.
• Experience conducting information security risk assessments.
• Strong analytical, troubleshooting, investigation, and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Industry certifications such as CISSP, CISM, CEH, GSEC, Security+, or equivalent.
• Experience working within enterprise Security Operations Centers.
• Experience supporting cloud security monitoring and incident response.
• Knowledge of security governance, compliance, and audit frameworks.
• Experience with security automation and orchestration platforms.
• Familiarity with threat hunting and advanced threat detection techniques.

Key Skills

• Security Operations Center (SOC)
• SIEM
• EDR
• DLP
• Incident Response
• Threat Intelligence
• Vulnerability Management
• Cloud Security
• Security Monitoring
• Threat Hunting
• Security Governance
• Risk Assessments
• Risk Management
• Firewalls
• Anti-Virus
• Security Automation
• Security Orchestration
• Audit & Compliance
• Threat Analysis
• Cybersecurity