Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Toronto; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Astra-North Infoteck Inc. in Toronto, ON is seeking a Senior SOC Analyst to lead security operations and incident response. The role emphasizes deploying and managing SIEM, EDR, DLP, and cloud security controls across multiple teams.

You will monitor threats, coordinate remediation, and produce threat intelligence to support strategic security planning. Hybrid work requires 3 days in the office with a focus on collaboration and rapid risk mitigation.

Qualifications

• Undergraduate degree or college diploma in related field.
• 5+ years of relevant experience.
• Experience managing and deploying IT infrastructure or cybersecurity technologies preferred.
• Possess relevant cybersecurity certifications.
• Strong technical capabilities in firewalls, anti-virus, content filtering, SIEM, threat intelligence, SOAR, vulnerability management and cloud security.

Responsibilities

• Manage and respond to security incidents per the incident response framework.
• Analyze, investigate, and document alerts from logs and security tools.
• Deploy and manage information security controls for assigned areas.
• Collect data to support information security dashboards.
• Participate in governance activities related to information security.

Skills

Strong written & verbal communication

Collaborate to solve security problems

Incident response coordination

Threat intelligence analysis

Education

Undergraduate degree or college diploma in related field

5+ years of relevant experience

Cybersecurity certifications

Tools

SIEM

EDR

DLP

Cloud security

Firewall management

Job description

Skills: MSS – Security Operations Center (SOC)

Experience Required: 10 & Above

Location: Toronto, ON – Hybrid (3 Days WFO)

Role Description

Core Qualifications (Education and Experience)

• Undergraduate degree or college diploma in related field.
• 5+ years of relevant experience.
• Experience managing and deploying IT infrastructure or cybersecurity technologies preferred.
• Possess relevant cybersecurity certifications.
• Strong technical capabilities in the areas of firewalls, anti-virus, content filtering, SIEM, threat intelligence, security orchestration and automation, vulnerability management and cloud security.
• Familiarity with SIEM, EDR, DLP, and other security technologies.
• Strong written and verbal communication skills.
• Collaborate to solve complex security problems as part of a highly dynamic, close-knit team of dedicated security professionals.
• Manage the effective response to security-related incidents in accordance with the established incident response framework.
• Analyze, manage, investigate, and document alerts from various sources such as logs and security tools.
• Deploy and manage information security controls for assigned areas.
• Collect relevant data to support the preparation of the information security dashboard.
• Participate in the administration of information security-related governance activities.
• Perform real-time monitoring of third-party threat intelligence feeds, forums, and mailing lists to gather information on vulnerabilities, exploits, and threat actors applicable to the fund.
• Produce threat intelligence reports to support operational and strategic security planning workstreams.
• Assess security incident trend data to determine systemic operational risks and then support the development of solutions to mitigate risks.
• Conduct information security risk assessments, recording issues in the risk register and driving mitigating actions.
• Coordinate the remediation of audit and/or self-identified control deficiencies.
• Act as a security advisor on various security risks and issues to various departments.