Senior SOC Threat Hunter & Incident Response (Level 2)

Olg Group; Toronto; On-site; CAD 120,000 - 150,000; Full time

Benefits offered by this job

Public Service Pension Plan

Paid Time-Off

Growth Focus

Equity, diversity, and inclusion

Job summary

OLG is seeking a Senior Cybersecurity Specialist to join the SOC Level 2 team for a 12-month contract in Ontario. You will investigate escalated alerts, perform containment actions, and manage the incident lifecycle across on-prem and cloud environments, while leveraging threat intelligence to strengthen detection and response capabilities.

The role requires 3–5+ years in IT security, strong knowledge of MITRE ATT&CK, SIEM/EDR skills, and relevant certifications.

Qualifications

• Post-secondary degree in computer science or cybersecurity.
• Cybersecurity certifications (CC, GSEC, GCIH, GCIA, SC-900, Security+)
• ITSM certification (ITIL Foundations)
• 3–5+ years in IT related disciplines
• Strong knowledge of MITRE ATT&CK and threat detection
• Experience with SIEM log analysis and EDR/NDR

Responsibilities

• Investigate escalated alerts/incidents using established procedures and SIEM/EDR/NDR data to build timelines.
• Execute containment steps (isolate host, disable accounts, block IPs) and resolve security events.
• Manage incident lifecycle: prioritize, categorize, document investigations, escalate unresolved issues, coordinate recovery.
• Provide feedback for alert tuning, perform threat intelligence tasks, and collaborate on policy incidents.
• Participate in on-call rotations and troubleshoot escalated access issues within SLA.
• Assist in enforcing security policies, risk assessments, and compliance activities; contribute to SOP/playbook updates.
• Support threat detection by validating detections during simulations and creating investigation guides.

Skills

Cybersecurity principles

Access control

Cryptography

Privacy requirements

System hardening

MITRE ATT&CK mapping

Threat intelligence

SIEM analysis

Incident response

Threat detection

Education

Post-secondary degree in computer science or cybersecurity

CC/GSEC/GCIH/GCIA/SC-900/Security+ certification

ITIL Foundations

3–5+ years IT experience

AGCO Category 2 Gaming Assistant Registration

Tools

Defender

CrowdStrike

Trend Vision One

Job description

OLG is seeking a Senior Cybersecurity Specialist to join the SOC Level 2 team for a 12-month contract in Ontario. You will investigate escalated alerts, perform containment actions, and manage the incident lifecycle across on-prem and cloud environments, while leveraging threat intelligence to strengthen detection and response capabilities.

The role requires 3–5+ years in IT security, strong knowledge of MITRE ATT&CK, SIEM/EDR skills, and relevant certifications.