Embedded GSOC Junior Intelligence Analyst

Sibylline Canada; Toronto; On-site; CAD 65,000 - 85,000; Full time

Benefits offered by this job

20 days PTO

5 sick days

Job summary

Sibylline Canada is seeking an Embedded GSOC Junior Intelligence Analyst for a 24/7 Global Security Operations Centre supporting a multinational client. The role emphasizes continuous monitoring, incident triage, and escalation, with horizon scanning for geopolitical and security events to inform decision making.

The analyst will produce timely intelligence briefings and work closely with cross-functional teams in a fully onsite Toronto office.

Qualifications

• Experience in security and intelligence with OSINT/SOCMINT workflows.
• Excellent written and spoken English with attention to detail.
• Ability to triage, classify events and follow SOPs in GSOC.
• Interest in geopolitical and security risk monitoring.

Responsibilities

• Continuously monitor incidents, alerts, and systems.
• Triaging and classifying events; initial escalation per SOPs.
• Coordinate incidents with stakeholders and produce reports.
• Horizon scan for geopolitical and reputational risks affecting the client.
• Produce intelligence briefings and support incident response.

Skills

OSINT platforms

SOCMINT platforms

Analytical thinking

English proficiency

Incident response

Team collaboration

Crisis communication

GSOC tools

Education

Security studies degree

Tools

GSOC software

OSINT tools

Job description

Embedded GSOC Junior Intelligence Analyst

• Full-time
• Compensation: CAD 65000 - CAD 85000 - yearly

Sibylline is a leading intelligence and strategic risk consultancy in the security sector. Since 2010 we have supported businesses, governments and NGOs through the provision of high-quality risk analysis, due diligence and consultancy services.

The firm provides an innovative, entrepreneurial and fast-growing working environment, offering employees ever greater exposure to high profile clients and challenges. Sibylline offers fantastic opportunities for career progression within a successful company, and we aim to help our employees to build their own personal profiles as well-regarded analysts within the broader industry.

Key attributes of Sibylline employees are:

• Self-motivated, and auto-improving individuals who can couple initiative and boldness with good judgement
• Excellent written and spoken English
• Clarity of thought and analytical flair
• Strong, demonstrable interest in security and intelligence
• The ability to work under pressure, demonstrate leadership when required but also be able to collaborate effectively in teams
• Excellent attention to detail

Expected Compensation: C$65,000 – C$85,000 per year

Location: Onsite, Toronto, ON

PTO: 20 days per annum

Sick: 5 paid days per annum

Vacancy Status: Existing Vacancy

This role will close for applications at 0900 EDT on Monday 14 September 2026.

Position Summary

We are looking for aGSOCJuniorIntelligence Analyst to join a newly established 24/7 Global Security Operations Centre (GSOC) for a multinational e-commerce client. This role will focus on continuous monitoring of incidents, alerts, and systems, triage and escalation, and incident response. You will alsosupport horizon scanning tomonitorgeopolitical and security events that mayimpactthe client’s employees, assets, reputation, and operations, producingtimelyand actionable intelligence briefings to inform decision making where required.

You will act as a central point for escalation, coordination, and communication during times of crisis, and you will engage with various business functions, ensuring a holistic approach to addressing their needs, expectations, and concerns. The GSOC team will have some onsite physical security responsibilities, including alarm and CCTV monitoring, and access control.

This role would require you to work 5x8-hour shifts, rotating early, late and nights to cover 24/7 including weekends with flexibility to cover gaps where required. The role is fully onsite at the client’s Toronto office.

Essential Functions / Responsibilities

• Continuous monitoring of incidents, alerts, and systems
• Act as central point for initial triage, verification, and classification of events
• Communicate, elevate, and coordinate incidents with relevant stakeholders as per established Standard Operating Procedures (SOPs)
• Adhere strongly to GSOC SOPs, and execute response playbooks and escalation protocols
• Complete incident logging and real-time documentation
• Horizon scan for geopolitical, security, reputational, and operational risks that may impact the client
• Conduct open-source intelligence (OSINT) collection and analysis to identify early warning indicators and proactively warn of threats to the client’s operations
• Support incident response through production of intelligence products, threat assessments and impact analysis
• Produce timely and actionable intelligence reports and briefings where required
• Provide monitoring and management of security operations, including CCTV feeds, access control and door alarms
• Other duties as assigned

Knowledge, Skills, and Abilities

• Experience, knowledge, and interest in current affairs, international relations, and emerging security threats
• Excellent written and spoken communication with a high attention to detail
• Experience in utilising OSINT and social media intelligence (SOCMINT) platforms, tools, and methodologies
• Ability to absorb and analyse large amounts of data to summarise events accurately and concisely
• Ability to work independently and as part of a collaborative team
• Ability to prioritize and manage multiple scheduled tasks, requests, and sources of information in an organised way
• Eagerness to learn and support all aspects of GSOC operations, including following SOPs related to physical and asset security, securing access points and alarm response
• At least 1+ years of experience working in a corporate setting or similar public or private sector environments
• Fluent written and spoken English
• Preferred experience with GSOC tools, including threat monitoring, OSINT, and SOCMINT platforms
• Preferred Undergraduate or Postgraduate qualifications in International Security, Intelligence, Risk, Geopolitics or other related disciplines, or equivalent professional experience

Work Environment/Physical Requirements

This position is moderately self-directed and requires understanding and compliance with company policies, procedures, and values. While performing the duties of this job, the employee is regularly required to interact collaboratively with the team and stakeholders, and communicate via phone, videophone, or textmessaging.The position may require travel up to 5%.

Interview Process

• Initial call with our Talent Acquisition team member
• Timed written assessment (arranged at a time that suits you) to test writing and analytical capability
• Panel interview with some of the team members and hiring managers at Sibylline
• Meet and Greet with the client

Artificial Intelligence:

Not used in candidate screening

Research indicates that certain groups are less likely to apply for a position unless they meet every single requirement. If you feel you meet some of the requirements and can offer a unique perspective to this role, we strongly encourage you to apply—you might be the perfect fit we’re looking for!

Sibylline is committed to the recruitment and selection of candidates without regard for sexual orientation, gender, ethnicity, age, political beliefs, culture, and lifestyle. We are committed to fostering a business culture that reflects these values and promotes equal opportunity.