Request ID: 114582-1 - Cyber SOC Analyst

Flexstaf IT; Toronto; Híbrido; CAD 85 000 - 120 000; Tempo integral

Resumo da oferta

Flexstaf IT is seeking a Cyber Security Operations Center (SOC) Analyst to monitor, investigate, and respond to security incidents while supporting threat intelligence and risk management. The role is based in Toronto, Ontario with a hybrid work arrangement (2–3 days in-office) and a contract duration of 6–12 months.

You will collaborate with security and infrastructure teams to improve the organization’s security posture, perform real-time monitoring, and produce security metrics for dashboards

Qualificações

• 5+ years of cybersecurity, SOC, or information security experience.
• Experience managing, supporting, or deploying cybersecurity and IT infrastructure technologies.
• Relevant cybersecurity certifications are preferred.
• Strong experience with: SOC, Security Incident Response, Threat Intelligence, Vulnerability Management, Cloud Security.
• Strong knowledge of: Firewalls, Anti-Virus Solutions, Content Filtering Technologies, SIEM Platforms.
• Security Orchestration & Automation knowledge.
• Experience working with: SIEM, EDR, DLP, Threat Detection Tools.
• Strong understanding of security monitoring, alert triage, and incident investigation processes.
• Experience conducting information security risk assessments.
• Strong analytical, troubleshooting, investigation, and problem-solving skills.
• Excellent written and verbal communication skills.

Responsabilidades

• Monitor, analyze, investigate, and respond to security incidents in accordance with established incident response frameworks.
• Perform real-time monitoring and analysis of alerts generated by SIEM, EDR, DLP, and other security platforms.
• Investigate security events, threats, vulnerabilities, and suspicious activities across enterprise environments.
• Deploy, manage, and maintain information security controls and cybersecurity technologies.
• Collect and analyze security metrics to support information security dashboards and reporting.
• Participate in information security governance, compliance, and operational security activities.
• Monitor third-party threat intelligence feeds, forums, and security advisories for emerging threats and vulnerabilities.
• Produce threat intelligence reports to support operational and strategic security planning.
• Analyze incident trends to identify systemic security risks and recommend mitigation strategies.
• Conduct information security risk assessments and maintain risk registers.
• Coordinate remediation activities for audit findings and identified control deficiencies.
• Act as a security advisor to business and technology teams on cybersecurity risks and controls.
• Collaborate with security teams, infrastructure teams, and stakeholders to improve the organization's security posture.

Conhecimentos

SOC

Security Incident Response

Threat Intelligence

Vulnerability Management

Cloud Security

Security Monitoring

Threat Hunting

Security Governance

Risk Assessments

Risk Management

Firewalls

Anti-Virus Solutions

Content Filtering Technologies

SIEM Platforms

Security Orchestration & Automation

Formação académica

Undergraduate degree or College Diploma in a related field

Ferramentas

SIEM Platforms

EDR

DLP

Firewalls

Anti-Virus Solutions

Content Filtering Technologies

Security Orchestration & Automation

Descrição da oferta de emprego

Job Description: Cyber Security Operations Center (SOC) Analyst responsible for monitoring, investigating, and responding to security incidents while supporting threat intelligence, risk management, security governance, and operational cybersecurity initiatives.
Location: Toronto, ON - Hybrid (2-3 Days WFO)
Contract Duration: 6-12 Month Contract

Key Responsibilities

• Monitor, analyze, investigate, and respond to security incidents in accordance with established incident response frameworks.
• Perform real-time monitoring and analysis of alerts generated by SIEM, EDR, DLP, and other security platforms.
• Investigate security events, threats, vulnerabilities, and suspicious activities across enterprise environments.
• Deploy, manage, and maintain information security controls and cybersecurity technologies.
• Collect and analyze security metrics to support information security dashboards and reporting.
• Participate in information security governance, compliance, and operational security activities.
• Monitor third-party threat intelligence feeds, forums, and security advisories for emerging threats and vulnerabilities.
• Produce threat intelligence reports to support operational and strategic security planning.
• Analyze incident trends to identify systemic security risks and recommend mitigation strategies.
• Conduct information security risk assessments and maintain risk registers.
• Coordinate remediation activities for audit findings and identified control deficiencies.
• Act as a security advisor to business and technology teams on cybersecurity risks and controls.
• Collaborate with security teams, infrastructure teams, and stakeholders to improve the organization's security posture.

Core Qualifications

• Undergraduate degree or College Diploma in a related field.
• 5+ years of cybersecurity, SOC, or information security experience.
• Experience managing, supporting, or deploying cybersecurity and IT infrastructure technologies.
• Relevant cybersecurity certifications are preferred.
• Strong experience with:
• Security Operations Center (SOC)
• Security Incident Response
• Threat Intelligence
• Vulnerability Management
• Cloud Security
• Strong knowledge of:
• Firewalls
• Anti-Virus Solutions
• Content Filtering Technologies
• SIEM Platforms
• Security Orchestration & Automation
• Experience working with:
• SIEM
• EDR
• DLP
• Threat Detection Tools
• Strong understanding of security monitoring, alert triage, and incident investigation processes.
• Experience conducting information security risk assessments.
• Strong analytical, troubleshooting, investigation, and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Industry certifications such as CISSP, CISM, CEH, GSEC, Security+, or equivalent.
• Experience working within enterprise Security Operations Centers.
• Experience supporting cloud security monitoring and incident response.
• Knowledge of security governance, compliance, and audit frameworks.
• Experience with security automation and orchestration platforms.
• Familiarity with threat hunting and advanced threat detection techniques.

Key Skills

• Security Operations Center (SOC)
• SIEM
• EDR
• DLP
• Incident Response
• Threat Intelligence
• Vulnerability Management
• Cloud Security
• Security Monitoring
• Threat Hunting
• Security Governance
• Risk Assessments
• Risk Management
• Firewalls
• Anti-Virus
• Security Automation
• Security Orchestration
• Audit & Compliance
• Threat Analysis
• Cybersecurity