Intermediate Security Operations Center Analyst

Lvs1; Calgary; On-site; CAD 70,000 - 110,000; Full time

Benefits offered by this job

RSP plan

relocation & travel opportunities

Job summary

Long View is seeking an Intermediate Security Operations Centre Analyst for Calgary, Edmonton, Toronto or Vancouver teams. The role is overnight and serves as the main security escalation point between team members, clients and vendors.

YNAM: 3+ years in incident detection/response with SIEM tools, ITIL-aligned processes, and cloud experience across Azure, AWS and GCP. MS Defender and certification like SC-200 are valued assets.

Qualifications

• 3+ years of professional experience in incident detection and response, malware analysis, or cyber forensics
• Experience with Security Information Event Management platforms like Sentinel, Splunk and Sumo Logic
• Experience with ITIL-based incident, problem, change and service requests processes
• Experience provisioning new client services and onboarding tasks
• Ability to communicate security concepts in non-technical terms

Responsibilities

• Actively participate in 24x7 operations of the Long View Security Operations Centre
• Monitor, identify and validate security events from SIEM tools
• Respond to critical incidents and coordinate remediation with the proper resources
• Coordinate major security incidents and provide internal communications
• Provide security guidance across the organization on threat containment and remediation
• Work with cloud technologies like Azure, AWS and Google Cloud Platform
• Support tool changes and updates for Sentinel and related tools

Skills

24x7 operations

SIEM monitoring

Incident detection

Security incident response

MS Defender

Sentinel

Splunk

Sumo Logic

ServiceNow

Cloud platforms

Tools

Sentinel

Splunk

Sumo Logic

MS Defender

ServiceNow

Azure

AWS

Google Cloud Platform

Job description

Long View. A career that helps you get more out of life.

A Long View career helps you get more out of life. We don’t just say it, we prove it. Every day. We’re proud of our reputation as one of North America’s most dynamic IT providers — and we’re even prouder of our culture that allows our people to live life to its fullest. At Long View, we create an environment of collaboration and support, of innovation and enthusiasm, of inclusion and belonging. As a member of the Long View team, you’ll see how our company’s core pillars — Integrity, Competence, Value, and Fun — resonate through the workplace. And in a recent survey, 90% of Long View team members rated Long View as a good or great place to work!

Are you passionate about IT Security? Are you excited about growing your security career within an innovative company?

We are looking for a driven and self-motivated Intermediate Security Operations Centre Analyst for our Calgary, Edmonton, Toronto or Vancouver IGS branches to work in an overnight role! You will act as the main point of security escalation between team members with Integrated Global Services, branches, clients and vendors.

• Actively participate in 24x7 operations of the Long View Security Operations Centre
• Monitor, identify and validate security events generated from Security Information Event Management (SIEM) tools
• Actively work in monitoring, event and incident management tools like Sentinel and ServiceNow
• Respond to critical business impacting situations and coordinate the efforts required to engage the proper resources to remediate the issue
• Coordinate major security incident situations and provide internal communications via email in a timely manor
• Provide general support for Security Information Event Management (SIEM) tool changes, tweaks, additions and updates within Sentinel and any additional tools leveraged by Long View
• Provide security guidance to team members across the organization how to best identify, contain and remediate security related incidents
• Understand complex issues across on-premise, public and private cloud solutions and articulate the impact to higher tier team members
• Follow and establish process documentation for receipt of security alerts for monitored devices, acknowledge the receipt of the event, opening and/or updating service desk tickets to track the handling of events to resolution and closure, assignment of the ticket to the appropriate owner
• Work with cloud technologies like Azure, AWS and Google Cloud Platform
• Fulfill reporting requests that can be pulled from Long View tools
• 3+ years of professional experience in incident detection and response, malware analysis, or cyber forensics
• SC-200 Certification
• Experience working with MS Defender
• Extensive experienceevaluating, interpreting, and integrating relevant data sources for the purpose of mergingnetwork attack analyses with counterintelligence and law enforcement investigations
• Experience with various IT service management tools including performance monitoring and ITSM solutions
• Experience with Security Information Event Management platforms like Sentinel, Splunk and Sumo Logic
• Experience working with incident, problem, change and service requests that follow ITIL framework standards
• Experience provisioning new client services and working through customer onboarding tasks
• Proven ability to troubleshoot and resolve technical and procedural issues
• Strong verbal and written communication which will allow you to communicate effectively to customers in non-technical terms
• Ability to react quickly and professionally with a sense of urgency
• Ability and desire to work on an on-call rotation for 24-hour support
• Intermediate level network and security certifications like the Security+, Network+, SSCP and/or CCNA Security
• Interesting work– Be part of exciting projects while accessing all the latest technologies
• Career growth– Permanent staff positions, paid training, career life planning, and relocation and travel opportunities
• RSP plan

Want to learn more about our culture and life at Long View? Check us out on LinkedIn and Instagram!

Long View’s mission of building the best and most sustainable team-driven organization requires dedicated and ambitious people. Through employee resource groups, impactful and effective conversations, townhalls and various company-wide training, including how to reduce unconscious bias, we are fostering an inclusive environment. We are committed to taking consistent, positive and lifelong action to be a diverse and equitable workplace because we know that the most effective companies are made up of people with varied identities, experiences and backgrounds.

Long View is an equal opportunity employer. If you have any accommodation requests for your interview or the role, please let your friendly Recruiter know.