Soc Analyst

Altis Technology; Toronto; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Altis Technology is seeking a SOC Analyst, Tier III in Toronto, staffed in a hybrid fashion (3 days on site). You will own complex cybersecurity incidents, coordinate responses, and drive forensics across endpoints, networks, and cloud environments.

You’ll work with technology, risk, legal, compliance and business teams, acting as a senior escalation point for sophisticated threats and leading efforts to improve detection, response and resilience.

Qualifications

• Extensive cybersecurity experience spanning incident response, digital forensics, threat hunting, and cyber threat intelligence.
• Advanced knowledge of malware analysis, memory, host and network forensics, incident reconstruction across Windows, Linux, macOS, cloud and on‑prem environments.
• Strong hands‑on experience with threat detection and incident response tooling and playbooks.

Responsibilities

• Lead complex cybersecurity incident investigations, including containment, eradication, recovery, root cause analysis, and post‑incident reporting.
• Conduct digital forensic investigations across endpoints, servers, networks, cloud environments, and enterprise infrastructure.
• Lead proactive threat hunting and leverage threat intelligence to identify emerging risks and strengthen defensive strategies.
• Enhance monitoring and detection capabilities through log source onboarding, detection use case development, analytics, and rule tuning.
• Develop incident response playbooks, remediation plans, and lessons learned to improve organizational resilience.
• Provide expert cybersecurity guidance and coordinate response efforts across technical teams, business stakeholders, and external partners.

Skills

Incident response

Digital forensics

Threat hunting

Cyber threat intelligence

Leadership

Communication to technical and non-IT

Education

GIAC

GCFA

GCIH

CISSP

CISA

Tools

SIEM: Sentinel

SIEM: Splunk

SIEM: LogRhythm

SIEM: QRadar

EDR: Defender for Endpoint

EDR: Cortex

EDR: CrowdStrike

Job description

Location: Toronto, ON, Hybrid (3x week)
Language: Strong written and spoken English communication skills
Background Check Requirement: Canadian criminal credit check, Canadian ID cross-check, public safety verification, 5-year employment verification, education verification, credit check, and social media check

About the Opportunity

Join a leading organization in the financial technology sector as a SOC Analyst, Tier III, where youll play a critical role in protecting the systems and digital infrastructure that support millions of transactions. Reporting to the Leader, Security Incident Management, youll take ownership of complex cybersecurity incidents and help strengthen enterprise-wide resilience.

Youll work closely with technology, risk, legal, compliance, and business teams, serving as a senior escalation point when sophisticated threats emerge. This is an opportunity to combine deep technical expertise with leadership, collaboration, and continuous improvement in a highly connected environment.

Whats In It for You

Youll join an innovative, inclusive workplace that values collaboration, professional growth, and employee well-being.

Your Responsibilities

• Youll lead complex cybersecurity incident investigations, including containment, eradication, recovery, root cause analysis, and post-incident reporting.
• Youll conduct digital forensic investigations across endpoints, servers, networks, cloud environments, and enterprise infrastructure.
• Youll lead proactive threat hunting and leverage threat intelligence to identify emerging risks and strengthen defensive strategies.
• Youll enhance monitoring and detection capabilities through log source onboarding, detection use case development, analytics, and rule tuning.
• Youll develop incident response playbooks, remediation plans, and lessons learned to improve organizational resilience.
• Youll provide expert cybersecurity guidance and coordinate response efforts across technical teams, business stakeholders, and external partners.

Skills and Qualifications

• Extensive cybersecurity experience spanning incident response, digital forensics, threat hunting, and cyber threat intelligence.
• Advanced expertise in malware analysis, memory, host and network forensics, incident reconstruction, and Windows, Linux, macOS, cloud, and on-premises environments.
• Strong experience with SIEM platforms including Sentinel, Splunk, LogRhythm, or QRadar, and EDR technologies including Defender for Endpoint, Cortex, or CrowdStrike.
• Strong knowledge of IDS/IPS, vulnerability management, TCP/IP, networking, operating systems, application security, and infrastructure security controls.
• Proven ability to lead incidents of varying severity, manage competing priorities, and communicate complex findings to technical and non-technical audiences.
• GIAC, GCFA, GCIH, CISSP, CISA, or equivalent certifications are assets, as is experience with ISO-certified environments and ITIL practices.
• Willingness to participate in an after-hours on-call rotation.

Note from the Hiring Manager

Were looking for someone who can bring deep technical expertise to complex investigations while staying calm and collaborative when the stakes are high. Youll have the opportunity to influence how we detect, respond to, and learn from emerging threats.

We appreciate the time and effort all applicants invest in their submissions. Please note that only candidates shortlisted for this role will be contacted directly. However, your profile will remain under consideration for future opportunities that align with your experience and career goals.All qualified applicants will receive fair consideration for employment. We welcome individuals of all backgrounds, experiences, and identities including those who identify as women, members of racialized groups, Indigenous Peoples, persons with disabilities, and 2SLGBTQIA+ communities. If you require an accommodation, please review our accessibility policy and reach out to our accessibility officer with any questions. Our human recruiters review all applications and always make the final hiring decision. On occasion, we also use AI-assisted tools to help review applications.