Analyst - SOC

CoFoMo Inc.; Montreal (administrative region); Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation

Wellness program

Telemedicine access

Hybrid work environment

Job summary

COFOMO, a leading Canadian consulting firm, seeks an Analyst - SOC in Montreal to join a hybrid team. You will design, build, and optimize detection and response capabilities across on-prem and cloud environments.

Fluent in French and English, you will work with cross-functional teams and customers, advancing security observability, threat hunting, and incident management within a dynamic, growth-oriented culture.

Qualifications

• Bachelor's degree in computer science, cybersecurity, information systems or related field.
• Five+ years in information security with emphasis on security observability and detection engineering.
• Two+ years in incident response, threat hunting, or advanced security monitoring.
• Fluency in French and English for daily tasks and customer interactions.

Responsibilities

• Design, develop, and maintain detection use cases aligned with MITRE ATT&CK framework.
• Develop and optimize SIEM, XDR, and SOAR content, including rules and dashboards.
• Perform advanced analytics on telemetry from endpoints, cloud, and identity sources.
• Assess detection gaps and continuously improve surveillance coverage.
• Collaborate with cyber security, cloud, infra, apps, data, architecture, and business teams.

Skills

Security observability

Threat hunting

Incident response

Cloud monitoring

SIEM expertise

Log correlation

MITRE ATT&CK

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

QRadar

Microsoft Sentinel

Splunk

Elastic

CrowdStrike

Defender

SentinelOne

Qualys

Job description

# Analyst - SOCMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here's a brief overview of the tasks and responsibilities you'll be able to do:** * Design, develop, and maintain detection use cases aligned with business risk and the MITRE ATT&CK framework;* Develop and optimize SIEM, XDR, and SOAR content, including correlation rules, dashboards, playbooks, and automations;* Perform advanced analytics and queries on telemetry from endpoints, identity, network, cloud, and SaaS applications;* Assess detection gaps and continuously improve surveillance coverage;* Validate control effectiveness using threat hunting, attack simulations, Purple Team exercises, and opponent emulations;* Expand detection and response capabilities for Azure, AWS, GCP, Kubernetes, containers, APIs, and cloud identities;* Define security logging and telemetry requirements for new cloud services;* Design security-related oversight mechanisms for artificial intelligence, generative artificial intelligence services, artificial intelligence agents, and Copilot environments;* Participate in investigations, containment activities, escalations, and post-incident reviews;* Improve Security Operations Center operational procedures, response guides, and processes;* Collaborate with cybersecurity, cloud, infrastructure, applications, data, architecture, and business teams;* Analyze new threats and recommend technology and operational improvements to the security operations center. **The profile you are looking for is as follows:** * Have five or more years of experience in information security, with a strong focus on security observability, detection engineering, cloud monitoring, incident response or cybersecurity operations;* Have two or more years of hands-on experience in incident response, event management, threat hunting, malware analysis, or advanced security monitoring;* Have completed a bachelor's degree in computer science, cybersecurity, information systems or a related field;* Hold an industry-recognized certification such as GEVA, OSCP, GCFA, CEH or another SSANS certification;* Master the integration, normalization, and operationalization of log sources from SIEM, XDR, EDR, cloud environments, identity providers, and SaaS applications;* Experience with one or more SIEM platforms such as QRadar, Microsoft Sentinel, Splunk or Elastic;* Be familiar with XDR or EDR solutions such as CrowdStrike, Microsoft Defender, SentinelOne or equivalent;* Proficiency in vulnerability, exposure, or attack surface management technologies such as Qualys, CrowdStrike Spotlight, or equivalent;* Experience with cloud security models and technologies, including CSPM, CWPP, CNAPP, container security, Kubernetes security, and cloud workload protection;* Develop queries and analytics on large telemetry datasets;* Perform the work in a hybrid mode with three days in person and two days from home;* This position requires fluency in French and English for daily tasks, understanding documentation, and professional communication with customers, suppliers, and colleagues across Canada. French and English language skills are essential, both oral and written.Apply## Why choose a career at COFOMO?\\** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\\* Only applicable to permanent COFOMO employees.*Make things happen.## Join our team.Make a difference every day by taking advantage of our development programs, access to our Centers of excellence, and a stimulating work environment.Life at COFOMO* ### Professional development We invest in our talent, encourage continuous growth, and support you in every aspect of your career.* ### Latest technologies and best practices Leverage your skills, knowledge, and problem-solving abilities on large-scale projects for leading clients.* ### Welcoming and people-focused organization A place where you can feel at home. COFOMO is a space where you can grow, learn, create, contribute, and be recognized for your achievements.Working at COFOMO gives you the opportunity to collaborate today on the technological projects of tomorrow, from green technology to the latest innovations in artificial intelligence and information security.## Our ValuesBeyond words, COFOMO’s values guide our actions and shape our policies. Without them, we’d be just another company, and we are anything but that.CommitmentWe are committed to mobilize as a team to achieve common goals.CourageousWe have the courage to innovate, to speak frankly and act with respect and equity.DiversityWe believe in the unique richness of each personPassionWe love what we do, and that passion is what powers our excellence and success.CreativityWe think creatively to deliver value in everything we do.## **At COFOMO :**You are recognized and valued for your skills, expertise, and, most importantly, your potential. That’s how we measure value here.We hire people based on talent. Period.Everyone matters, everyone’s voice counts, and everyone is respected.COFOMO values the differences that enable each of us to make meaningful and unique contributions to our success and shared culture. We foster diversity and inclusion, creating workplaces where new ideas, different experiences, and unique perspectives can be shared, often with people you might not otherwise have the opportunity to collaborate with.MASCULINE OR FEMININE TERMS ARE USED INTERCHANGEABLY WITHOUT ANY INTENT OF DISCRIMINATION. COFOMO IS AN EMPLOYER OF CHOICE THAT PROMOTES DIVERSITY AND APPLIES FAIR EMPLOYMENT PRACTICES.