Senior Cybersecurity Analyst

Jobtailor; Boisbriand; On-site; CAD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking an experienced Senior Security Analyst to lead security monitoring and incident response in an enterprise environment. You will oversee day-to-day SOC activities across EDR, SIEM, and cloud security, and coordinate with IT teams to minimize risk.

You will analyze threats, document root causes, and help improve vulnerability management, access controls, and security procedures. The role demands 5+ years in SOC/IR, strong networks, Windows/Linux knowledge, and hands-on

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or equivalent experience.
• 5+ years in cybersecurity within SOC, IR or infrastructure security in an enterprise.
• Strong knowledge of networks, OS (Windows/Linux), AD and cloud basics.

Responsibilities

• Lead day-to-day security alert monitoring activities (EDR, SIEM, email security, M365 security, etc.).
• Perform in-depth analysis and investigation of security events to distinguish false positives from real incidents.
• Handle medium- to high-severity incidents and coordinate actions with IT teams and stakeholders.
• Document incidents, root causes and remediation steps, and improve procedures based on lessons learned.
• Provide guidance and oversee implementation of access controls (least privilege, RBAC, onboarding, offboarding).
• Analyze vulnerability scan results and help prioritize remediation based on risk and criticality.
• Contribute to continuous improvement of the vulnerability management program (SLAs, reporting, dashboards, etc.).
• Help develop and maintain security procedures, standards and operational guides.

Skills

Analytical Thinking

Communication

Collaboration

Problem-Solving

Leadership

Education

Bachelor's degree in IT/CS/Cybersecurity or equivalent

Tools

CrowdStrike

Tanium

Qualys

Azure

AWS

SIEM

EDR

Email Security

Web Filtering

Identity Security

Active Directory

Microsoft 365

Job description

• Security monitoring and incident response
• Lead day-to-day security alert monitoring activities (EDR, SIEM, email security, M365 security, etc.).
• Perform in-depth analysis and investigation of security events to distinguish false positives from real incidents.
• Handle medium- to high-severity incidents (phishing, malware, account compromise, data exfiltration, etc.) and coordinate actions with IT teams and stakeholders.
• Document incidents, root causes and remediation steps, and improve procedures based on lessons learned.
• Provide guidance and oversee implementation of access controls (least privilege, role-based access, onboarding, transfers and offboarding).
• Analyze vulnerability scan results and help prioritize remediation based on risk and criticality.
• Contribute to continuous improvement of the vulnerability management program (SLAs, reporting, dashboards, etc.).
• Help develop and maintain security procedures, standards and operational guides.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience.
• Typically 5+ years of experience in cybersecurity, in a Security Operations Center (SOC), incident response, or infrastructure security within an enterprise environment.
• Strong understanding of the following: Networks: TCP/IP, VPN, firewalls, proxies, DNS, routing.
• Operating systems: Windows Server, Windows desktops and basic knowledge of Linux.
• Core services: Active Directory, Microsoft 365 (M365/O365), virtualization and basic cloud (Azure and/or AWS).
• Hands-on experience with several of the following technologies: Endpoint security and EDR solutions (e.g., CrowdStrike or equivalent).
• SIEM and log management (use-case creation, analysis and tuning).
• Vulnerability and patch management (e.g., Tanium, Qualys).
• Email and Microsoft 365 security controls, web filtering and identity security (MFA, conditional access).

Core Competencies

Demonstrates expertise in security monitoring, incident response, and vulnerability management, with a strong foundation in network security and access control implementation. Proficient in analyzing security events and coordinating with IT teams to enhance security procedures and standards.

Highest-signal resume keywords

• Security Monitoring
• Incident Response
• Vulnerability Management
• EDR Solutions
• SIEM and Log Management

ATS Optimization Keywords

Hard Skills

• Cybersecurity
• Network Security
• TCP/IP
• Active Directory
• Microsoft 365
• Endpoint Security
• Vulnerability Management
• Incident Analysis
• Access Control Implementation
• Operating Systems

Soft Skills

• Analytical Thinking
• Communication
• Collaboration
• Problem-Solving
• Leadership

Industry Keywords

• Security Operations Center
• Incident Response
• Phishing
• Malware
• Data Exfiltration
• Risk Management
• Cloud Security
• Operational Guides
• Security Procedures
• Root Cause Analysis

Tools & Technologies

• CrowdStrike
• Tanium
• Qualys
• Azure
• AWS
• SIEM
• EDR
• Email Security
• Web Filtering
• Identity Security