Security Operations Engineer

TRISTAR; Canada; Remote; CAD 80,000 - 100,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Operations Engineer to enhance their security posture. This role focuses on monitoring and remediating vulnerabilities, managing security tools, and ensuring compliance with SOC2 standards. The ideal candidate will possess strong analytical and communication skills, enabling them to work effectively with both technical and non-technical stakeholders. Join a dynamic team dedicated to safeguarding critical systems and fostering a culture of cybersecurity awareness. This opportunity offers a chance to make a significant impact in a rapidly evolving field, where your expertise will be valued and your contributions recognized.

Qualifications

• Hands-on experience with security tools and vulnerability management.
• Strong understanding of security best practices and compliance.

Responsibilities

• Monitor and analyze vulnerabilities across systems and networks.
• Collaborate with IT teams to remediate identified vulnerabilities.
• Support cybersecurity awareness training and compliance tasks.

Skills

Vulnerability Management

Security Tools

Analytical Skills

Communication Skills

Problem-Solving Skills

Education

Bachelor’s degree in Cybersecurity

Equivalent experience

Tools

SIEM

EDR

Vulnerability Management Platforms

PowerShell

Python

Job description

The Cybersecurity Operations Engineer will be responsible for monitoring, analyzing, and remediating vulnerabilities across the organization’s systems and networks. This role will support the implementation and operation of security tools and work closely with IT teams to ensure timely remediation of vulnerabilities and exposures. The ideal candidate will have hands-on experience with security tools, vulnerability management processes, and the ability to communicate effectively with both technical and non-technical stakeholders. The Cybersecurity Operations Engineer will also be involved in managing the cybersecurity awareness training program, running reports from the MSSP platform, responding to risk assessment questionnaires, and assisting in SOC2 compliance tasks.

Essential Duties and Responsibilities:

Vulnerability Management:

• Perform regular vulnerability scans using established security tools.
• Analyze scan results to identify security weaknesses, misconfigurations, and potential threats.
• Collaborate with IT and application teams to prioritize and remediate identified vulnerabilities, ensuring they are addressed in a timely manner.
• Maintain records of remediation activities and provide updates to management and the cybersecurity team.

Security Monitoring & Reporting:

• Monitor security alerts and events from SIEM, EDR, and other security platforms to detect unusual activities or potential threats.
• Conduct further analysis on identified security incidents and escalate issues to the Cybersecurity Operations Manager or other senior staff as needed.
• Generate regular reports on the status of vulnerabilities, remediation efforts, and security incidents for management review.
• Run reports from the MSSP platform (Alert Logic) and escalate findings as necessary.

Risk Assessment & SOC2 Compliance:

• Assist in responding to risk assessment questionnaires from clients, ensuring accuracy and timeliness.
• Conduct monthly tasks related to SOC2 controls, documenting progress and maintaining records for audit purposes.
• Collaborate with other security team members to ensure compliance with internal policies and external requirements.

Cybersecurity Awareness Program:

• Support the management and maintenance of the cybersecurity awareness training program.
• Track completion rates and performance metrics for employee security training.
• Regularly update and enhance training materials to ensure they address emerging threats.
• Work closely with infrastructure and application teams to implement configuration changes, patches, or other remediation activities to resolve identified vulnerabilities.
• Test and verify the effectiveness of applied patches and configurations.
• Develop and maintain standard operating procedures for vulnerability remediation.

Security Tools Administration:

• Support the deployment, configuration, and maintenance of security tools, including SIEM, EDR, vulnerability management platforms, and other relevant systems.
• Assist in the tuning and optimization of security tools to enhance detection capabilities and reduce false positives.

Documentation & Reporting:

• Document security processes, configurations, and remediation activities.
• Contribute to the development and continuous improvement of security policies, standards, and procedures.
• Partner with other members of the cybersecurity team to support ongoing projects and security initiatives.
• Provide technical guidance and support to junior staff as needed.
• Engage with IT teams, development teams, and third-party vendors to address security issues and improve overall security posture.

Qualifications

Required:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
• Strong understanding of vulnerability management, remediation processes, and security best practices.
• Experience with security tools, including SIEM, EDR, and vulnerability management platforms.
• Ability to analyze security alerts and vulnerabilities, develop effective remediation plans, and track progress.
• Strong problem-solving and analytical skills.
• Excellent communication skills, both written and verbal.

Preferred:

• Relevant security certifications, such as CompTIA Security+, CISSP, or CEH.
• Experience with patch management and configuration management.
• Familiarity with security frameworks and standards, such as NIST, ISO 27001, or CIS Controls.
• Scripting experience (e.g., PowerShell, Python) for automating security processes.