SOC Automation Analyst

Insight Global; Toronto; Hybrid; CAD 83,000 - 90,000; Full time

Job summary

Insight Global in Toronto is seeking a seasoned Security Automation Engineer to build and optimize SOC workflows using Microsoft Logic Apps, Security Copilot, and GitHub Copilot. The role focuses on reducing manual work by automating alert handling, investigations, and response across the security stack.

You will collaborate with SOC and cybersecurity teams, test automations, and evolve the environment toward AI-assisted operations.

Qualifications

• 5+ years in automation or cybersecurity.
• 1.5+ years of hands-on SOC automation.
• Strong SOC/security operations background.
• Hands-on with Logic Apps for security workflows.
• Experience with AI-assisted security operations.
• On-site availability 2x per week in downtown Toronto.

Responsibilities

• Build and enhance SOC automation workflows using Logic Apps to cut manual tasks.
• Use Microsoft Security Copilot to streamline investigations and responses.
• Leverage GitHub Copilot to accelerate scripting and automation development.
• Automate SOC processes: alerts, enrichment, investigations, escalation, response.
• Develop automated playbooks integrating Microsoft security tools with others.
• Use Cortex XSOAR to extend automated security orchestration.
• Evolve SOC toward AI-assisted, agentic automation.
• Collaborate with SOC teams to map manual processes to scalable workflows.
• Test and refine automations to ensure reliability and efficiency.

Skills

5+ years experience in automation or

1.5+ years hands-on SOC automation

Strong SOC operations background

Scripting and integration skills

AI-enabled security operations

Microsoft-based security environment

Tools

Microsoft Logic Apps

Microsoft Security Copilot

GitHub Copilot

Cortex XSOAR

API integration

Job description

Contract: 8 months (possibility of extension)

Hybrid: 1-2 days a week onsite

Pay Rate: $60-65

JOB DESCRIPTION

Build and enhance SOC workflow automation using Microsoft Logic Apps, reducing repetitive manual work for security analysts.

Use Microsoft Security Copilot to identify opportunities to streamline and automate security investigation and response workflows.

Leverage GitHub Copilot to accelerate scripting, development, and creation of new security automations.

Automate processes across the SOC, including alert handling, enrichment, investigation workflows, escalation, and response activities.

Develop and maintain automated security workflows and playbooks that integrate Microsoft's security ecosystem with other security platforms.

Work within Cortex XSOAR where applicable to build, enhance, or integrate automated security orchestration workflows.

Help evolve the SOC toward a more agentic environment, identifying manual analyst activities that can be handled or supported through AI-driven automation.

Partner directly with SOC and cybersecurity teams to understand existing manual processes, identify automation opportunities, and translate them into scalable workflows.

Test, troubleshoot, and continuously improve existing automations to ensure workflows are reliable and are actually reducing manual effort.

REQUIRED SKILLS AND EXPERIENCE

• - 5+ years experience working within automation or cybersecurity
• -1.5+ years of hands‑on automation experience within a Security Operations Center (SOC) environment
• - Strong SOC / security operations background with an understanding of how alerts, incidents, investigations, and response workflows operate.
• - Hands‑on experience with Microsoft Logic Apps, specifically building and automating security‑related workflows.
• - Experience with Microsoft Security Copilot and using AI to support or enhance security operations and analyst workflows.
• - Hands‑on experience with GitHub Copilot to assist with scripting, development, and security automation.
• - Strong experience automating manual SOC processes and workflows, rather than simply monitoring or responding to alerts.
• - Comfortable working within a heavily Microsoft‑based security environment.
• - Strong scripting and integration skills with the ability to connect different security tools and automate workflows across platforms.
• - Experience with Cortex XSOAR and security orchestration / SOAR automation.
• - Experience helping an organization move from traditional manual automation toward a more agentic / AI‑enabled SOC environment.
• - Experience using AI or agent‑based automation to improve security operations.
• - Must be available to come on site 2x days per week downtown Toronto

NICE TO HAVE SKILLS AND EXPERIENCE

• - Experience working a major Canadian bank
• - Exposure to Microsoft Sentinel or other Microsoft security products.
• - Experience working with APIs and integrating security platforms.

Vacancy: This posting is for a currently vacant role, and the successful candidate will be hired into an existing open position.

*Artificial Intelligence tools are used to assist in screening and assessing applicants for this position