Night-Shift SOC Analyst

Lvs1; Calgary; On-site; CAD 70,000 - 110,000; Full time

Benefits offered by this job

RSP plan

relocation & travel opportunities

Job summary

Long View is seeking an Intermediate Security Operations Centre Analyst for Calgary, Edmonton, Toronto or Vancouver teams. The role is overnight and serves as the main security escalation point between team members, clients and vendors.

YNAM: 3+ years in incident detection/response with SIEM tools, ITIL-aligned processes, and cloud experience across Azure, AWS and GCP. MS Defender and certification like SC-200 are valued assets.

Qualifications

• 3+ years of professional experience in incident detection and response, malware analysis, or cyber forensics
• Experience with Security Information Event Management platforms like Sentinel, Splunk and Sumo Logic
• Experience with ITIL-based incident, problem, change and service requests processes
• Experience provisioning new client services and onboarding tasks
• Ability to communicate security concepts in non-technical terms

Responsibilities

• Actively participate in 24x7 operations of the Long View Security Operations Centre
• Monitor, identify and validate security events from SIEM tools
• Respond to critical incidents and coordinate remediation with the proper resources
• Coordinate major security incidents and provide internal communications
• Provide security guidance across the organization on threat containment and remediation
• Work with cloud technologies like Azure, AWS and Google Cloud Platform
• Support tool changes and updates for Sentinel and related tools

Skills

24x7 operations

SIEM monitoring

Incident detection

Security incident response

MS Defender

Sentinel

Splunk

Sumo Logic

ServiceNow

Cloud platforms

Tools

Sentinel

Splunk

Sumo Logic

MS Defender

ServiceNow

Azure

AWS

Google Cloud Platform

Job description

Long View is seeking an Intermediate Security Operations Centre Analyst for Calgary, Edmonton, Toronto or Vancouver teams. The role is overnight and serves as the main security escalation point between team members, clients and vendors.

YNAM: 3+ years in incident detection/response with SIEM tools, ITIL-aligned processes, and cloud experience across Azure, AWS and GCP. MS Defender and certification like SC-200 are valued assets.