Security Operations Center (SOC) Analyst

Northern Computer Inc; Edmonton; Hybrid; CAD 75,000 - 110,000; Full time

Benefits offered by this job

Extended health

Dental coverage

Wellness spending

Job summary

Northern Computer Inc in Edmonton is seeking a SOC Analyst to monitor and remediate security alerts across client environments. You will escalate incidents, document responses, and contribute to security baselines and automation initiatives.

The role requires 3+ years in an MSP NOC/SOC, familiarity with EDR/AV, SIEM concepts, and ConnectWise Manage/Automate, plus a cybersecurity credential.

Qualifications

• 3+ years in a NOC/SOC or security operations role in MSP.
• Experience triaging alerts across multiple client environments.
• Ability to document outcomes and escalate appropriately.
• Familiarity with Microsoft 365 security controls and identity hygiene.

Responsibilities

• Remediate, monitor, and triage alerts in the Security Queue and mailboxes.
• Escalate complex or critical alerts per procedures and document responses.
• Lead CVE intake and triage vulnerabilities to NOC Analysts.
• Perform incident response and create Security RCAs for incidents.
• Help develop and audit the Security Baseline and SOPs.
• Coordinate security changes and maintain real-time documentation.
• Provide input to client solutions teams and support security meetings.
• Participate in after-hours on-call rotations and client maintenance.

Skills

SOC Analyst

Incident response

Ticketing workflows

Education

Cybersecurity certificate

Tools

EDR/AV

SIEM concepts

ConnectWise Manage/Automate

Job description

Why this role matters

Our clients trust us to keep them secure and productive. As a SOC Analyst, you’ll monitor and remediate security alerts across multiple client environments, respond to cyber incidents, **escalate** effectively, and close the loop with clear documentation and Security RCAs. Reporting to the Director of Central Services, you’ll work closely with our Service Desk, NOC, Client Solutions, and Professional Services teams to uphold our security baseline, improve response processes, and reduce recurring support needs through proactive remediation and automation.

What You’ll Do

• Remediate, monitor and triage alerts: Monitor the Security Queue, CW Automate, and security mailboxes. Classify and remediate general alerts, confirm business impact, create and assign tickets when required, **escalate** complex or critical alerts according to established procedures, and document every response and resolution in the ticketing system.
• CVE and vulnerability intake: Review security forums, message boards, community pages, and vendor press pages for imminent threats. Triage CVE vulnerability notifications by creating tickets and assigning them to NOC Analysts when necessary.
• Incident response: Identify the severity of each cyber incident, remediate standard incidents, and **escalate** major incidents to Expert Analysts according to the escalation process. During a major incident, provide support and guidance to the Tech Lead and Communicator. Complete a Security RCA for every standard and major cyber incident.
• Security tooling, standards and baselines: Help develop and regularly evaluate the Security Baseline for Northern Computer and all managed clients. Maintain efficient baseline auditing processes and security-product SOPs, complete semi-annual top-to-bottom security audits and remediate baseline issues, support security-tool deployments, and complete 60-day security check-ups following security projects.
• Security change coordination: Communicate security changes internally and collaborate with other departments to manage those changes effectively. Keep relevant documentation, calendars, and ticket notes current in real time, and promptly communicate schedule conflicts or outstanding work.
• Internal Cybersecurity support: Provide input to the Client Solutions and Professional Services teams to ensure that security standards and the Security Baseline are upheld. Support client security meetings by providing cybersecurity reports when required.
• Cross-team collaboration: Work closely with the Service Desk and NOC, communicate issues and scheduling conflicts promptly, and collaborate with other departments during wider incidents and security changes.
• Automation and continuous improvement: Find and use efficient or automated methods for recurring work, automate alert resolution whenever practical, and proactively reduce, simplify, or eliminate end-user support requests.
• Additional company support: As requested by the Director of Central Services, assist the Service Desk, support internal IT operations, and participate in project-based security work. Provide after-hours and on-call support as scheduled.

What You Bring

• Experienced MSP NOC/SOC professional: 3+ years of experience working in a NOC, SOC, or closely related security operations role within a managed service provider environment, with demonstrated experience triaging alerts across multiple client environments, responding to incidents, documenting outcomes, and escalating effectively.
• Tool awareness: Familiarity with EDR/AV, phishing simulators, basic SIEM concepts, and ticketing workflows (e.g., ConnectWise Manage/Automate).
• Methodical triage: Comfort applying priority rules, confirming impact, and escalating on time—under pressure and in afterhours rotations when needed.
• Documentation discipline: Clear ticket notes and postincident writeups; curiosity to turn fixes into repeatable standards.
• Education and professional development: A cybersecurity certificate, or a college or university certificate, diploma, or degree in cybersecurity or a related field, is preferred. You stay current on relevant threats, trends, tools, and security products.
• Experienced with Microsoft 365 security controls, identity hygiene (MFA/conditional access), and email compromise playbooks.

Nice-to-haves

• Basic scripting or workflow-automation experience, such as PowerShell or Rewst
• Hold or be working towards relevant industry certifications, such as CompTIA Security+, ISC2, or Microsoft security certifications

What success looks like:

You keep security-tool deployments and configurations aligned with standards, leave no alerts unactioned, resolve assigned cybersecurity alerts and Service Desk security tickets, support security-tool deployments, participate in client security meetings, and create automation that saves the team measurable time.

Location, Schedule & flexibility

This role is based in our Edmonton office and follows a hybrid work arrangement that combines in-office and work-from-home days. It also participates in scheduled after-hours and on-call rotations and occasional client maintenance windows.

What We Offer

Hybrid work arrangement, combining in-office and work-from-home-days. Extended health and dental coverage, life and disability insurance, Health & Wellness Spending Accounts, virtual healthcare, Employee & Family Assistance Program, and a Group Retirement Savings Plan.