Senior Cyber Incident Response Lead

Socket.dev; Toronto; On-site; CAD 90,000 - 140,000; Full time

Job summary

The Royal Bank of Canada is seeking a Senior Incident Response Analyst to serve as the primary contact for Security Operations Centre management regarding security incidents as part of Blue team operations. You will support team members with critical incidents impacting RBC users, systems, infrastructure, and resources.

You’ll play a key role in safeguarding RBC through detailed investigations, coordinating remediation efforts across multiple teams, and drive security incidents to timely and

Qualifications

• Bachelor's degree in Computer Science, IT, or related discipline.
• 2+ years of cyber security incident response experience / Blue Team experience.
• Advanced log analysis and SIEM query capabilities.

Responsibilities

• Global accountability to respond to critical security incidents/events providing accurate and timely reporting to Global Security Leadership.
• Provide 24/7 support for security incidents impacting mission critical business and IT infrastructure, including supporting global incident management and response, remediation, and reporting
• Perform log review and analysis, examining both direct and collector-sourced logs
• Collaborate with DevOps and other technical teams to execute complex remediation activities, including software patching and system re-imaging
• Provide postmortem reporting for leadership detailing security vulnerabilities, technology gaps, shortcomings or miscellaneous security issues.
• Maintain timely communication with the CSIRT extended teams

Skills

Security incident response

Log analysis

SIEM queries

Incident coordination

Clear communication

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM tools

Job description

The Royal Bank of Canada is seeking a Senior Incident Response Analyst to serve as the primary contact for Security Operations Centre management regarding security incidents as part of Blue team operations. You will support team members with critical incidents impacting RBC users, systems, infrastructure, and resources.

You’ll play a key role in safeguarding RBC through detailed investigations, coordinating remediation efforts across multiple teams, and drive security incidents to timely and