Security Operations Center (SOC) Analyst

Northern Computer Inc; Edmonton; Hybrid; CAD 75,000 - 95,000; Full time

Benefits offered by this job

Extended health and dental coverage

Life and disability insurance

Wellness Spending Accounts

Virtual healthcare

Employee & Family Assistance Program

Group Retirement Savings Plan

Job summary

Northern Computer Inc. in Edmonton is seeking a SOC Analyst to monitor and remediate security alerts across multiple client environments, respond to incidents, and document outcomes. You will escalate where needed and support incident response with clear RCA documentation.

This MSP/NOC/SOC role is based in our Edmonton office with a hybrid schedule, after-hours on-call rotations, and opportunities to improve security baselines, automation, and proactive remediation.

Qualifications

• 3+ years in a NOC/SOC or MSP security operations role.
• Experience triaging alerts across multiple client environments.
• Ability to escalate effectively and document outcomes clearly.

Responsibilities

• Remediate, monitor and triage alerts; classify impact and create tickets.
• Triage CVEs and vulnerability notices, assign to NOC Analysts as needed.
• Identify incident severity; remediate standard incidents and escalate major ones.
• Document post-incident writeups and complete Security RCAs.
• Support security baseline development and semi-annual audits.

Skills

NOC/SOC experience

Incident response

Documentation

Shift work/on-call

Education

Cybersecurity certificate

Tools

EDR/AV

Phishing simulations

SIEM basics

ConnectWise Manage/Automate

Job description

Why this role matters

Our clients trust us to keep them secure and productive. As a SOC Analyst, you’ll monitor and remediate security alerts across multiple client environments, respond to cyber incidents, **escalate** effectively, and close the loop with clear documentation and Security RCAs. Reporting to the Director of Central Services, you’ll work closely with our Service Desk, NOC, Client Solutions, and Professional Services teams to uphold our security baseline, improve response processes, and reduce recurring support needs through proactive remediation and automation.

Why this role matters

Our clients trust us to keep them secure and productive. As a SOC Analyst, you’ll monitor and remediate security alerts across multiple client environments, respond to cyber incidents, **escalate** effectively, and close the loop with clear documentation and Security RCAs. Reporting to the Director of Central Services, you’ll work closely with our Service Desk, NOC, Client Solutions, and Professional Services teams to uphold our security baseline, improve response processes, and reduce recurring support needs through proactive remediation and automation.

What You’ll Do

• Remediate, monitor and triage alerts: Monitor the Security Queue, CW Automate, and security mailboxes. Classify and remediate general alerts, confirm business impact, create and assign tickets when required, and **escalate** complex or critical alerts according to established procedures, and document every response and resolution in the ticketing system.
• CVE and vulnerability intake: Review security forums, message boards, community pages, and vendor press pages for imminent threats. Triage CVE vulnerability notifications by creating tickets and assigning them to NOC Analysts when necessary.
• Incident response: Identify the severity of each cyber incident, remediate standard incidents, and **escalate** major incidents to Expert Analysts according to the escalation process. During a major incident, provide support and guidance to the Tech Lead and Communicator. Complete a Security RCA for every standard and major cyber incident.
• Security tooling, standards and baselines: Help develop and regularly evaluate the Security Baseline for Northern Computer and all managed clients. Maintain efficient baseline auditing processes and security-product SOPs, complete semi-annual top-to-bottom security audits and remediate baseline issues, support security-tool deployments, and complete 60-day security check-ups following security projects.
• Security change coordination: Communicate security changes internally and collaborate with other departments to manage those changes effectively. Keep relevant documentation, calendars, and ticket notes current in real time, and promptly communicate schedule conflicts or outstanding work.
• Internal Cybersecurity support: Provide input to the Client Solutions and Professional Services teams to ensure that security standards and the Security Baseline are upheld. Support client security meetings by providing cybersecurity reports when required.
• Cross-team collaboration: Work closely with the Service Desk and NOC, communicate issues and scheduling conflicts promptly, and collaborate with other departments during wider incidents and security changes.
• Automation and continuous improvement: Find and use efficient or automated methods for recurring work, automate alert resolution whenever practical, and proactively reduce, simplify, or eliminate end-user support requests.
• Additional company support: As requested by the Director of Central Services, assist the Service Desk, support internal IT operations, and participate in project-based security work. Provide after-hours and on-call support as scheduled.
  

What You Bring

• Experienced MSP NOC/SOC professional: 3+ years of experience working in a NOC, SOC, or closely related security operations role within a managed service provider environment, with demonstrated experience triaging alerts across multiple client environments, responding to incidents, documenting outcomes, and escalating effectively.
• Tool awareness: Familiarity with EDR/AV, phishing simulators, basic SIEM concepts, and ticketing workflows (e.g., ConnectWise Manage/Automate).
• Methodical triage: Comfort applying priority rules, confirming impact, and escalating on time—under pressure and in afterhours rotations when needed.
• Documentation discipline: Clear ticket notes and postincident writeups; curiosity to turn fixes into repeatable standards.
• Education and professional development: A cybersecurity certificate, or a college or university certificate, diploma, or degree in cybersecurity or a related field, is preferred. You stay current on relevant threats, trends, tools, and security products.
• Experienced with Microsoft 365 security controls, identity hygiene (MFA/conditional access), and email compromise playbooks
  

Nice-to-haves

• Basic scripting or workflow-automation experience, such as PowerShell or Rewst
• Hold or be working towards relevant industry certifications, such as CompTIA Security+, ISC2, or Microsoft security certifications
  

What success looks like:

You keep security-tool deployments and configurations aligned with standards, leave no alerts unactioned, resolve assigned cybersecurity alerts and Service Desk security tickets, support security-tool deployments, participate in client security meetings, and create automation that saves the team measurable time.

Location, Schedule & flexibility

This role is based in our Edmonton office and follows a hybrid work arrangement that combines in-office and work-from-home days. It also participates in scheduled after-hours and on‑call rotations and occasional client maintenance windows.

What We Offer

Hybrid work arrangement, combining in-office and work-from-home-days. Extended health and dental coverage, life and disability insurance, Health & Wellness Spending Accounts, virtual healthcare, Employee & Family Assistance Program, and a Group Retirement Savings Plan.