Cyber Security Operations Center Analyst

Finastra; Mississauga; Hybrid; CAD 95,000 - 100,000; Full time

Job summary

Finastra in Mississauga is seeking a Cyber Security Operations Center Analyst to monitor, investigate and respond to security incidents across cloud and on‑prem environments.

You will work in a hybrid role with two in‑office days per week, participate in an on‑call rotation, and collaborate with global teams to strengthen the company’s security posture.

Qualifications

• Experience in a SOC/NOC or security monitoring environment.
• Understanding of threat detection methodologies and incident response processes.
• Familiarity with cloud and on‑prem security monitoring tools and logs.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Perform threat analysis, triage, and determine remediation requirements.
• Support incident response activities including containment and documentation.
• Collaborate with internal teams and external security partners to improve monitoring.

Skills

SOC experience

SIEM

Threat analysis

Incident response

Networking concepts

Cloud and on-prem

Analytical skills

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Microsoft Sentinel

Splunk

QRadar

ArcSight

Job description

## Cyber Security Operations Center AnalystApply: Mississauga - Avebury: Full time: Posted 3 Days Ago: REQ0726\\_0037929# **Who are we?**At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission‐critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries.**What Will You Contribute?**As a **Cyber Security Operations Center (SOC)** **Analyst**, you will play a critical role in protecting Finastra's global technology environment by monitoring, investigating, and responding to cybersecurity threats and incidents. Working within the Cyber Security Operations team, you will leverage advanced security technologies, threat intelligence, and analytical expertise to identify and mitigate risks across cloud and on-premises environments. This role is ideal for a cybersecurity professional who thrives in a fast-paced operational environment, enjoys solving complex security challenges, and is passionate about continuous learning. You will support North American operations, collaborate with global teams, and contribute to strengthening Finastra's overall security posture. The Finastra Role Catalogue identifies Security Operations professionals as responsible for identifying cybersecurity vulnerabilities, providing situational threat awareness, and managing overall security posture.**Responsibilities & Deliverables*** Monitor, investigate, and respond to security alerts, events, and incidents across enterprise environments using security monitoring and detection tools.* Perform threat analysis and triage activities to determine the validity, impact, scope, and remediation requirements of potential security threats.* Support incident response activities, including containment, escalation, tracking, resolution, and post-incident documentation.* Utilize SIEM platforms, threat detection technologies, and security monitoring tools to proactively identify suspicious activity and security anomalies.* Assist in the administration, configuration, and optimization of security tools across cloud and on-premises environments.* Collaborate with internal teams and external security partners to investigate threats and improve security monitoring capabilities.* Contribute to process improvements, automation opportunities, knowledge documentation, and operational playbooks to enhance SOC effectiveness.* Participate in an on-call and rotational shift schedule to support continuous security monitoring and operational coverage.* Embed AI into project delivery to drive productivity, automate routine activities, strengthen decision quality through trusted data, and deliver continuous process improvement while applying appropriate human judgement.**Required Experience & Skills*** Experience working within a Security Operations Center (SOC), Network Operations Center (NOC), security monitoring, or threat management environment.* Hands-on experience with SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or similar security monitoring platforms.* Strong understanding of security alerts, threat detection methodologies, incident response processes, and escalation management.* Knowledge of networking concepts including TCP/IP, DNS, HTTP, SMTP, operating systems, and common cybersecurity attack techniques.* Experience investigating security events across cloud and on-premises environments using security tools, logs, and threat intelligence data.* Strong analytical, troubleshooting, and problem-solving skills with the ability to manage multiple priorities in a dynamic environment.* Excellent communication and collaboration skills with the ability to work effectively across technical and non-technical teams.* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline. Cybersecurity certifications such as GSEC, GCIA, GMON, GCDA, CISSP, or similar credentials are preferred. Experience within financial services, fintech, and security automation is considered an asset.**Location:** This is a hybrid role with 2 days per week in office requirement (Mississauga, Ontario, Canada). Rotational shift coverage supporting North America. Standard shifts include 9:00 AM - 5:00 PM EST and 1:00 PM - 9:00 PM EST on a rotating basis.As part of our hiring process, we may use artificial intelligence (AI) technology to help screen and shortlist applications. All final hiring decisions are made by our recruitment team.This position is for an existing vacancy within our organization.**Compensation:** CAD 95,000-100,000 Annual.