Senior SOC Incident Lead & Forensics Expert

Altis; Toronto; On-site; CAD 110,000 - 160,000; Full time

Job summary

Altis is seeking a SOC Analyst, Tier III, to own complex security incidents and drive enterprise resilience. Reporting to the Leader, Security Incident Management, you will work with technology, risk, legal, compliance, and business teams as a senior escalation point.

You will lead investigations across endpoints, servers, networks, cloud, and on‑prem environments, develop playbooks, and mentor peers while participating in after-hours on-call rotation.

Qualifications

• Extensive cybersecurity experience spanning incident response, digital forensics, threat hunting, and cyber threat intelligence.
• Advanced expertise in malware analysis, memory, host and network forensics, and cross-platform incident reconstruction.
• Strong experience with SIEM platforms like Sentinel, Splunk, LogRhythm, QRadar and EDR tools such as Defender for Endpoint, Cortex, CrowdStrike.
• Solid knowledge of IDS/IPS, vulnerability management, TCP/IP, OS, application security and infrastructure security controls.
• Proven ability to lead incidents, manage priorities, and communicate findings to technical and non-technical audiences.
• Certifications such as GIAC GCFA GCIH CISSP CISA are assets; ISO ITIL experience is a plus.
• Willingness to participate in after-hours on-call rotation.

Responsibilities

• You'll lead complex cybersecurity incident investigations, including containment, eradication, recovery, root cause analysis, and post-incident reporting.
• You'll conduct digital forensic investigations across endpoints, servers, networks, cloud environments, and enterprise infrastructure.
• You'll lead proactive threat hunting and leverage threat intelligence to identify emerging risks and strengthen defensive strategies.
• You'll enhance monitoring and detection capabilities through log source onboarding, detection use case development, analytics, and rule tuning.
• You'll develop incident response playbooks, remediation plans, and lessons learned to improve organizational resilience.
• You'll provide expert cybersecurity guidance and coordinate response efforts across technical teams, business stakeholders, and external partners.

Skills

Incident response

Digital forensics

Threat hunting

Cyber threat intelligence

Leadership

Tools

Sentinel

Splunk

LogRhythm

QRadar

Defender for Endpoint

Cortex

CrowdStrike

Job description

Altis is seeking a SOC Analyst, Tier III, to own complex security incidents and drive enterprise resilience. Reporting to the Leader, Security Incident Management, you will work with technology, risk, legal, compliance, and business teams as a senior escalation point.

You will lead investigations across endpoints, servers, networks, cloud, and on‑prem environments, develop playbooks, and mentor peers while participating in after-hours on-call rotation.