Security Operations Analyst

Staples Canada; Richmond Hill; On-site; CAD 70,000 - 90,000; Full time

Benefits offered by this job

Associate discount

Health and Dental benefits

RRSP/DPSP

Performance bonuses

Learning & Development programs

And more.

Job summary

Staples Canada is seeking a Security Operations Analyst to join our cybersecurity team. You will act as an escalation point for alerts, support incident response activities, and help operate and enhance security monitoring, vulnerability management, awareness, and response capabilities across Staples Canada’s corporate, e‑commerce, cloud, and retail environments.

You will work with IT Operations, infrastructure, cloud, and vendor teams to protect our environments and participate in on‑call

Qualifications

• Understanding of cybersecurity operations, incident response and vulnerability management.
• Familiarity with NIST/ATT&CK frameworks and incident reporting.

Responsibilities

• Monitor and investigate cybersecurity events across corporate, cloud, e-commerce and retail environments.
• Review alerts from MSSP and internal tools; triage and escalate.
• Support incident response playbooks and documentation standards.

Skills

Cybersecurity operations

Incident response

Security monitoring

Threat hunting

Communication with stakeholders

On-call experience

Education

Diploma in Computer Technology

Engineering, Cybersecurity or related field

Tools

SIEM

EDR

Email security

Firewalls

IDS/IPS

WAF

DDoS protection

Content filtering

Identity platforms

Vulnerability management tools

Job description

Staples Canada is looking for a Security Operations Analyst who will report to the Sr. Director, Cybersecurity. In this role, you will act as an escalation point for alerts and investigations triaged by our Managed Security Services Provider, support incident response activities, and help operate and improve Staples Canada’s security monitoring, vulnerability management, awareness, and response capabilities. As part of a small cybersecurity team, you will wear multiple hats across security operations, security tooling, reporting, communications, and project support. You will work closely with IT Operations, infrastructure, cloud, retail technology, and vendor teams to help protect corporate, e-commerce, cloud, and retail store environments.

Responsibilities

• Monitor, analyse, investigate, and escalations cybersecurity events across corporate, cloud, e-commerce, and retail store environments.
• Review and action security alerts, reports, and escalations from MSSP providers and internal security tools.
• Triage messages sent to the Cybersecurity Shared Mailbox and ensure timely routing, response, or escalation.
• Support security projects related to the implementation, maintenance, and improvement of cybersecurity tools, processes, and capabilities.
• Assist with compliance-driven security activities, including PCI, payment environment security, vulnerability awareness, and related reporting requirements.
• Coordinate with IT Operations, store technology, infrastructure, cloud, and vendor teams to support investigations, remediation activities, incident response playbooks, and documentation standards.

Physical Environment and Working Conditions

• On-site office environment.
• Participate in an on‑call rotation when required.
• May require up to 5% travel within North America and travel to retail stores.
• May require working hours in the evenings and weekends as required by the business.

Qualifications

• Understanding of cybersecurity operations, incident response, vulnerability management, security monitoring, and common SOC processes.
• Familiarity with security frameworks and practices such as the NIST Cybersecurity Framework, MITRE ATT&CK, incident response playbooks, detection logic, correlation rules, and incident reporting.
• Working knowledge of security tools and technologies, including SIEM, EDR, email security, firewalls, IDS/IPS, WAF, DDoS protection, content filtering, identity platforms, and vulnerability management tools.
• Ability to investigate alerts, validate findings, document evidence, escalated incidents, and clearly communicate security risks and issues to technical and non‑technical stakeholders.
• Understanding of common attack techniques, including phishing, malware, credential abuse, suspicious authentication activity, endpoint compromise, and web/application attacks.
• 1–2 years of experience supporting security investigations, monitoring activities, threat hunting, or SOC‑related activities in a corporate or security operations environment; exposure to cloud infrastructure such as Azure, AWS, or GCP is an asset.
• Diploma in Computer Technology, Engineering, Cybersecurity, or a related field; certifications such as Security+, CySA+, CEH, GCIH, GCIA, SC‑200, AZ‑500, CISSP, CCSP, or similar are considered assets.

Benefits

• Associate discount
• Health and Dental benefits
• RRSP/DPSP
• Performance bonuses
• Learning & Development programs
• And more.

About Us

We value transparency in our hiring processes. Please note, artificial intelligence may be used in certain stages to screen, assess, or select applicants, however, a human reviewer makes all final decisions. This posting is for an existing vacancy.

About the Team

At Staples Canada we are a dynamic, inspiring partner to our customers and the communities in which we live. As The Working and Learning Company, we inspire people to work smarter, learn more and grow every day. We’re looking for curious, approachable, and passionate individuals who love finding solutions. If that’s you, let’s work, learn, and grow together.

Inclusion

Staples Canada is continuously working towards creating an inclusive and diverse work environment. We welcome, value and thrive on perspectives and contributions from backgrounds that vary by race, gender, sexual orientation, gender identity or expression, lifestyle, age, educational background, national origin, religion or physical ability. If you have a disability or special need that requires accommodation, please let us know.