Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence Skills: MSS – Security Operations Center (SOC) Experience Required: 10 & Above Location: Toronto, ON – Hybrid (3 Days WFO) Role Description Core Qualifications (Education and Experience) Undergraduate degree or college diploma in related field. 5+ years of relevant experience.

Experience managing and deploying IT infrastructure or cybersecurity technologies preferred. Possess relevant cybersecurity certifications. Strong technical capabilities in the areas of firewalls, anti-virus, content filtering, SIEM, threat intelligence, security orchestration and automation, vulnerability management and cloud security.

Familiarity with SIEM, EDR, DLP, and other security technologies. Strong written and verbal communication skills. Core Accountabilities Collaborate to solve complex security problems as part of a highly dynamic, close-knit team of dedicated security professionals. Manage the effective response to security-related incidents in accordance with the established incident response framework.

Analyze, manage, investigate, and document alerts from various sources such as logs and security tools. Deploy and manage information security controls for assigned areas. Collect relevant data to support the preparation of the information security dashboard. Participate in the administration of information security-related governance activities.

Perform real-time monitoring of third-party threat intelligence feeds, forums, and mailing lists to gather information on vulnerabilities, exploits, and threat actors applicable to the fund. Produce threat intelligence reports to support operational and strategic security planning workstreams. Assess security incident trend data to determine systemic operational risks and then support the development of solutions to mitigate risks.

Conduct information security risk assessments, recording issues in the risk register and driving mitigating actions. Coordinate the remediation of audit and/or self-identified control deficiencies. Act as a security advisor on various security risks and issues to various departments.