Embedded GSOC Intelligence Analyst

Sibylline Ltd; Toronto; On-site; CAD 85,000 - 100,000; Full time

Benefits offered by this job

20 days PTO per annum

5 paid sick days per annum

Onsite Toronto office

Job summary

Sibylline Ltd is seeking a GSOC Intelligence Analyst to join a 24/7 Global Security Operations Centre for a multinational client. The role focuses on horizon scanning to monitor geopolitical and security events and to produce timely intelligence briefings for decision makers.

It also supports incident monitoring, triage, escalation, and response, onsite in Toronto. The position requires rotating 5x8 shifts (early, late, nights, weekends) with a strong emphasis on OSINT, SOCMINT, and clear

Qualifications

• Experience with open-source intelligence gathering and social media monitoring.
• Ability to produce timely, credible intelligence briefings for decision makers.
• Experience supporting incident monitoring, triage, escalation, and response.

Responsibilities

• Monitor open source, social media, and vendor feeds for global security threats.
• Draft incident alerts and analytical reports with actionable insights for stakeholders.
• Support threat monitoring around client travel, events and operations with established procedures.
• Convey recommendations during incidents and crisis management briefings.
• Develop and innovate assessment techniques to grow the intelligence function.
• Triage, verify, and classify events as a central point of contact.
• Coordinate incidents per SOPs and execute escalation protocols.
• Monitor and manage security operations including CCTV and access control.

Skills

OSINT platforms

SOCMINT

Analytical writing

Security operations

Team collaboration

Job description

Expected Compensation: C$85,000 – C$100,000 per year
Location: Onsite, Toronto, ON
PTO: 20 days per annum
Sick: 5 paid days per annum
Vacancy Status: Existing Vacancy
This role will close for applications at 0900 EDT on Monday 14 September 2026.

Position Summary

We are looking for a GSOC Intelligence Analyst to join a newly established 24/7 Global Security Operations Centre (GSOC) for a multinational e-commerce client. This role will focus on conducting horizon scanning to monitor geopolitical and security events that may impact the client’s employees, assets, reputation, and operations, producing timely and actionable intelligence briefings to inform decision making where required. You will also support continuous monitoring of incidents, alerts, and systems, triage and escalation, and incident response. You will act as a central point for escalation, coordination, and communication during times of crisis, and you will engage with various business functions, ensuring a holistic approach to addressing their needs, expectations, and concerns. The GSOC team will have some onsite physical security responsibilities, including alarm and CCTV monitoring, and access control. This role would require you to work 5x8-hour shifts, rotating early, late and nights including weekends with flexibility to cover gaps where required. The role is fully onsite at the client’s Toronto office.

Essential Functions / Responsibilities

• Monitor open source, social media, and vendor feeds for global security threats.
• Draft incident alerts and analytical reports that are timely, credible, and provide actionable insights to internal stakeholders.
• Support threat monitoring around client travel, events and operations, escalating incidents as appropriate using rehearsed procedures.
• Convey draft recommendations for internal stakeholders during ongoing incidents, senior management updates, and crisis management briefings.
• Support the growth of the intelligence function within the client company by working in collaboration with team leads to develop and innovate assessment techniques
• Act as central point for initial triage, verification, and classification of events
• Communicate, elevate, and coordinate incidents with relevant stakeholders as per established Standard Operating Procedures (SOPs)
• Adhere strongly to GSOC SOPs, and execute response playbooks and escalation protocols
• Provide monitoring and management of security operations, including CCTV feeds, access control and door alarms
• Other duties as assigned

Knowledge, Skills, and Abilities

• Experience and interest in current affairs, international relations, and emerging security threats
• Excellent written and spoken communication with a high attention to detail
• Experience in utilising OSINT and social media intelligence (SOCMINT) platforms, tools, and methodologies
• Ability to absorb and analyse large amounts of data to summarise events accurately and concisely
• Ability to work independently and as part of a collaborative team
• Ability to prioritise and manage multiple scheduled tasks, requests, and sources of information in an organised way
• Eagerness to learn and support all aspects of GSOC operations, including following SOPs related to physical and asset security, securing access points and alarm response