Security Operations Center (SOC) Analyst

Northern Computer; Edmonton; Hybrid; CAD 65,000 - 95,000; Full time

Benefits offered by this job

Extended health coverage

Dental coverage

Life insurance

Disability insurance

Wellness spending account

Virtual healthcare

Employee & Family Assistance Program

Group retirement savings plan

Job summary

Northern Computer is seeking an experienced SOC Analyst to monitor, triage, and remediate security alerts across multiple client environments. You will respond to incidents, document actions, and complete RCAs to improve response processes.

The role collaborates with Service Desk, NOC, and Professional Services to uphold security baselines. You will participate in automations, baseline audits, and security change coordination, with hybrid Edmonton work arrangements and after-hours rotations as

Qualifications

• Cybersecurity certificate or related degree preferred; must stay current on threats, tools and trends.
• Experience with MSP/NOC/SOC in a managed services environment is required.
• 3+ years triaging alerts, incidents, and documenting outcomes across multiple client environments.
• Knowledge of EDR/AV, phishing simulations, SIEM basics, and ticketing workflows.
• Experience with Microsoft 365 security controls and identity hygiene (MFA/CA).

Responsibilities

• Remediate, monitor, and triage security alerts; document responses in ticketing system.
• Review CVEs, triage vulnerability notifications, and assign to NOC analysts as needed.
• Identify incident severity, remediate standard incidents, escalate major incidents.
• Develop and evaluate security baseline; support tool deployments and audits.
• Coordinate security changes and keep documentation up to date in real time.
• Provide input to client solutions teams to uphold security standards.
• Collaborate with Service Desk and NOC during incidents and changes.
• Automate recurring tasks and improve alert resolution processes.
• Provide after-hours and on-call support as scheduled.

Skills

EDR/AV

Phishing simulations

SIEM concepts

Ticketing workflows

Microsoft 365 security

Identity hygiene (MFA)

Documentation discipline

Education

Cybersecurity certificate

Related cybersecurity degree/cert

Tools

ConnectWise Manage/Automate

Microsoft 365 security tools

Job description

Security Operations Center (SOC) Analyst

Why this role matters

Our clients trust us to keep them secureand productive. As a SOC Analyst, you’ll monitor and remediate security alertsacross multiple client environments, respond to cyber incidents, escalating effectively, and close the loop with clear documentation and Security RCAs. Reportingto the Director of Central Services, you’ll work closely with our Service Desk,NOC, Client Solutions, and Professional Services teams to uphold our securitybaseline, improve response processes, and reduce recurring support needsthrough proactive remediation and automation.

What you’ll do

• Remediate, monitor andtriage alerts: Monitor the Security Queue, CWAutomate, and security mailboxes. Classify and remediate general alerts,confirm business impact, create and assign tickets when required, escapecomplex or critical alerts according to established procedures, and documentevery response and resolution in the ticketing system.
• CVE and vulnerabilityintake: Review security forums, message boards, communitypages, and vendor press pages for imminent threats. Triage CVE vulnerabilitynotifications by creating tickets and assigning them to NOC Analysts whennecessary.
• Incident response: Identify the severityof each cyber incident, remediate standard incidents, and escalatema jorincidents to Expert Analysts according to the escalation process. During a major incident, provide support and guidance to the Tech Lead and Communicator.Complete a Security RCA for every standard and major cyber incident.
• Security tooling, standardsand baselines: Help develop and regularly evaluate the Security Baseline for Northern Computer and all managed clients. Maintainefficient baseline auditing processes and security-product SOPs, completesemi-annual top-to-bottom security audits and remediate baseline issues,support security-tool deployments, and complete 60-day security check-upsfollowing security projects.
• Security changecoordination: Communicate security changesinternally and collaborate with other departments to manage those changeseffectively. Keep relevant documentation, calendars, and ticket notes currentin real time, and promptly communicate schedule conflicts or outstanding work.
• Internal Cybersecurity support: Provide input to the Client Solutions and Professional Servicesteams to ensure that security standards and the Security Baseline are upheld. Supportclient security meetings by providing cybersecurity reports when required.
• Cross-teamcollaboration: Work closely with the Service Deskand NOC, communicate issues and scheduling conflicts promptly, and collaboratewith other departments during wider incidents and security changes.
• Automation and continuousimprovement: Find and use efficient or automatedmethods for recurring work, automate alert resolution whenever practical, andproactively reduce, simplify, or eliminate end-user support requests.
• Additional company support: As requested by the Director of Central Services, assist theService Desk, support internal IT operations, and participate in project-basedsecurity work. Provide after-hours and on-call support as scheduled.

What you bring

• Experienced MSP NOC/SOCprofessional: 3+ years of experience working in aNOC, SOC, or closely related security operations role within a managed serviceprovider environment, with demonstrated experience triaging alerts acrossmultiple client environments, responding to incidents, documenting outcomes,and escalating effectively.
  • Tool awareness: Familiarity with EDR/AV, phishing simulators, basic SIEM concepts, and ticketing workflows(e.g., ConnectWise Manage/Automate).
  • Methodical triage: Comfort applyingpriority rules, confirming impact, and escalating on time—under pressureand in after‑hours rotations when needed.
  • Documentation discipline: Clearticket notes and post‑incident writeups; curiosity to turn fixes intorepeatable standards.
• Education and professionaldevelopment: A cybersecurity certificate, or acollege or university certificate, diploma, or degree in cybersecurity or arelated field, is preferred. You stay current on relevant threats, trends,tools, and security products.
  • Experienced with Microsoft 365 security controls, identity hygiene (MFA/conditional access), and emailcompromise playbooks

Nice-to-haves

• Basic scripting orworkflow-automation experience, such as PowerShell or Rewst
• Hold or be working towards relevantindustry certifications, such as CompTIA Security+, ISC2, or Microsoft securitycertifications

What success looks like:

You keep security-tool deployments and configurations aligned withstandards, leave no alerts unactioned, resolve assigned cybersecurity alertsand Service Desk security tickets, support security-tool deployments,participate in client security meetings, and create automation that saves theteam measurable time.

Location, Schedule & flexibility

This role is based in our Edmonton officeand follows a hybrid work arrangement that combines in-office andwork-from-home days. It also participates in scheduled after-hours and on-callrotations and occasional client maintenance windows.

What we offer

Hybrid work arrangement, combining in-office and work-from-home-days. Extended health and dental coverage, life and disability insurance, Health & Wellness Spending Accounts, virtual healthcare, Employee & Family Assistance Program, and a Group Retirement Savings Plan.