SOC Analyst (Night Shift) ATCO · Calgary, Canada Full-time · On-site — 4 hours ago

Emploive; Calgary; Hybrid; CAD 85,000 - 110,000; Full time

Benefits offered by this job

Competitive pay

Flex benefits

Tuition assistance

Training and mentorship

Charitable donation matching

Job summary

ATCO is seeking a Security Operations Centre Analyst - Nights to act as first responder to security incidents, monitoring alerts from SIEM, IDS/IPS, firewalls, and endpoints to protect digital assets. You will document findings and ensure smooth shift handovers while collaborating with security teams.

The role requires 3+ years in a SOC, knowledge of MITRE ATT&CK, strong SIEM experience, and the ability to work nights in a 24/7 environment, with independent judgment and clear communication.

Qualifications

• Post-secondary education in Cybersecurity or IT.
• 3+ years in a SOC or security monitoring role.
• Knowledge of MITRE ATT&CK framework and common attack techniques.
• Strong networking, Linux/Windows, and security fundamentals.
• Experience with incident detection, escalation, and response.
• Clear written and verbal communication; able to explain technical findings.
• Ability to work nights in a 24/7 environment.
• Independent judgment and prioritization under pressure.

Responsibilities

• Monitor security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection.
• Investigate and respond to incidents such as malware, phishing, and unauthorized access.
• Analyze threats, vulnerabilities, and risks to information systems.
• Conduct threat hunts to uncover malicious activity within the network.
• Document incidents and provide clear shift handovers.
• Collaborate with security teams for coordinated responses.
• Suggest rule and detection improvements to reduce false positives.
• Participate in post-incident reviews and policy development.

Skills

Cybersecurity experience

Security monitoring

MITRE ATT&CK knowledge

SIEM proficiency

Networking fundamentals

Linux/Windows

Incident detection & response

Analytical thinking

Written & verbal communication

Independent judgment

Education

Post-secondary education in Cybersecurity or IT

Tools

Splunk

ArcSight

Sentinel

IDS/IPS

Job description

Why Work Here?

At ATCO, your cybersecurity expertise will help protect the systems and services that keep our businesses and communities connected. In this overnight role, you’ll provide critical continuity for ATCO’s security operations, helping the organization remain responsive and resilient around the clock.

You’ll be part of a collaborative security community grounded in caring, integrity, agility, and collaboration. With opportunities to strengthen your technical capabilities, share knowledge, and improve detection and response practices, you’ll contribute directly to a resilient, forward-looking security program while growing your career across ATCO's diverse businesses.

About the Role:

As a Security Operations Centre (SOC) Analyst - Nights, you will serve as a first responder to security incidents and are integral in preventing, detecting, and responding to cyber threats and attacks on ATCO’s network and systems. Working independently overnight, you will collaborate with ATCO security teams and business units to protect the confidentiality, integrity, and availability of the organization’s digital assets and services. You will also document findings and actions and provide clear shift handovers, ensuring emerging threats receive continuous attention.

• Continuously monitor security alerts and events from various sources such as SIEM (Security Information and Event Management) systems, IDS/IPS (Intrusion Detection/Prevention Systems), firewalls, Endpoint Protection and other security tools
• Investigate and respond to security incidents, including malware infections, phishing attacks, and unauthorized access attempts
• Analyze and assess potential threats, vulnerabilities, and risks to the organization's information systems
• Conduct threat hunts during incidents to search for signs of malicious activity or potential threats within the network
• Participate in shift handovers to ensure continuity of monitoring efforts
• Recommend rule and detection improvements to reduce false positives and strengthen threat-detection capabilities.
• Provide feedback on quality of log events and identify potential gaps in existing logging
• Document and report security incidents, findings, and actions taken to relevant stakeholders
• Work closely with other ATCO security teams and business units to ensure a coordinated response to security incidents and to improve overall security posture.
• Participate in post-incident reviews and contribute to the development and implementation of security policies, procedures, and best practices
• Share knowledge, exchange lessons learned, and support continuous learning across the SOC

What You Bring:

• Post-secondary education in Cybersecurity, Information Technology, or related field
• 3+ years cybersecurity experience in a Security Operations Centre (SOC) or similar security monitoring environment
• Knowledge of common attack techniques, tactics, and vectors, including phishing, distributed denial-of-service attacks, and malware, with familiarity with frameworks such as MITRE ATT&CK
• Experience investigating and assessing attack activity within a security monitoring environment
• Solid understanding of networking, operating systems (Linux/Windows), and security principles
• Experience with incident detection, escalation, and response
• Proficiency with SIEM tools (e.g., Splunk, ArcSight, Sentinel, or similar platforms)
• Familiarity with firewalls, intrusion detection and prevention systems (IDS/IPS), endpoint protection, and related security technologies
• Sound analytical judgment and close attention to detail when assessing security events and incidents
• Clear written and verbal communication skills, including experience explaining technical issues and incident findings to technical and non-technical stakeholders
• Experience preparing clear, accurate incident records that document findings, decisions, and response actions.
• Independent judgment, effective prioritization, and composure in high-pressure situations
• Ability to work scheduled night shifts in a 24/7 environment, including weekends and holidays
• Previous experience working night shifts or operating independently is an asset.

What We Offer:

• A culture based on caring, integrity, agility, collaboration, and striving for excellence
• Competitive compensation
• Flex benefits
• Tuition assistance program
• Training and mentorship programs
• Charitable donation matching

We would like to thank everyone for their application; however, only those being considered for an interview will be contacted.

ATCO delivers inspired solutions for a better world. We are a diversified global corporation with investments in the essential services of Structures & Logistics, Utilities, Energy Infrastructure, Retail Energy, Transportation and Commercial Real Estate. Learn more about how we build communities, energize industries and deliver customer-focused solutions like no other company in the world at www.atco.com. ATCO is proud to be an equal opportunity employer. Visit our website for more information.

In the spirit of reconciliation, we acknowledge the traditional territories and homelands on which many of our ATCO operations and facilities are located. We honour and respect the diverse history, languages, ceremonies, and culture of the Indigenous Peoples who call these areas home.