Senior SOC Analyst: Threat Detection & Incident Response

Ontario Lottery and Gaming Corporation; Sault Ste. Marie; Presencial; CAD 66.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Public Service Pension Plan

Paid Time Off

Professional development

Descripción de la vacante

Ontario Lottery and Gaming Corporation is seeking a Senior Cybersecurity Specialist to lead threat analysis, incident response, and SOC improvements across on-premise, cloud, and endpoint environments.

The role emphasizes strengthening detection capabilities, coordinating with stakeholders, and maintaining rigorous incident records while supporting security policy enforcement and continuous improvement initiatives.

Formación

• Strong knowledge of cybersecurity principles, access control, cryptography, privacy, and system hardening across platforms.
• Hands-on with network protocols, SIEM analysis, endpoint telemetry, and incident response.
• AGCO Category 2 Gaming Assistant Registration (required at offer)

Responsabilidades

• Investigate escalated alerts or incidents using SIEM and related tools.
• Execute containment steps to maintain system integrity.
• Manage incident lifecycle from prioritization to resolution.
• Provide feedback for alert tuning and threat intelligence tasks.
• Participate in on-call rotations and troubleshoot access issues within SLA.
• Assist in implementing security policies and risk assessments.
• Update playbooks/SOPs to improve SOC effectiveness.
• Support threat detection by validating detections during simulations.

Conocimientos

Threat analysis

Incident response

SOC operations

MITRE ATT&CK

SIEM analysis

Endpoint telemetry

Network protocols

Policy compliance

Educación

Post-secondary degree in Computer Science or Cybersecurity

Herramientas

Defender

CrowdStrike

Trend Vision One

Descripción del empleo

Ontario Lottery and Gaming Corporation is seeking a Senior Cybersecurity Specialist to lead threat analysis, incident response, and SOC improvements across on-premise, cloud, and endpoint environments.

The role emphasizes strengthening detection capabilities, coordinating with stakeholders, and maintaining rigorous incident records while supporting security policy enforcement and continuous improvement initiatives.