Technology Operations Analyst - Cybersecurity Managed Services, New Brunswick

Ernst & Young Advisory Services Sdn Bhd; Dieppe; On-site; CAD 48,000 - 72,000; Full time

Benefits offered by this job

Mental health stipend

Job summary

EY in Dieppe, New Brunswick seeks a junior/intermediate Security Operations Analyst to support MDR services in a SOC environment. You will monitor, investigate, and respond to alerts from Microsoft Sentinel and Defender, perform investigations using logs and telemetry, and contribute to detection engineering.

Collaborate with clients, assist onboarding, and help improve playbooks, detections, and reporting while adhering to regulatory requirements.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or related discipline.
• Relevant certifications such as Microsoft Certified: Azure Security Engineer Associate and Microsoft Sentinel specialization.
• CISSP, GCED, GCIA or similar (preferred, not required).
• Minimum 1-2 years of experience in cybersecurity operations, with incident response and security monitoring experience.

Responsibilities

• Perform security monitoring, triage, and investigation of alerts from Microsoft Sentinel and Defender using documented playbooks.
• Escalate confirmed or complex incidents, including suspected compromise, lateral movement, persistence mechanisms, and data exfiltration.
• Conduct investigations using log analytics, endpoint telemetry, identity signals, and cloud-native audit logs.
• Validate, scope, and document security incidents with root cause analysis and impact assessment.
• Assist with containment and recovery under senior guidance.
• Tune and maintain Sentinel analytics rules and reduce false positives to improve signal quality.
• Contribute to use-case development for detections, hunting queries, and alert enrichment.
• Support threat hunting activities and document findings and recommendations for improvements.
• Engage in client calls, onboarding, and steady-state operations within a managed services context.
• Contribute to playbooks and procedural improvements; ensure investigations align with regulations and contractual requirements.

Skills

SOC operations

Microsoft Sentinel

Microsoft Defender

KQL

Incident response

Threat hunting

Client engagement

French language

Education

Bachelor's degree in computer science or related field

Tools

Microsoft Defender for Endpoint

Log analytics

Azure Cloud

Job description

Technology Operations Analyst - Cybersecurity Managed Services, New Brunswick

Other locations: Primary Location Only

Date: 8 Sept 2026

Requisition ID: 1743275

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

Ernst & Young is seeking junior and intermediate-level technical security professionals with hands-on expertise in Microsoft Sentinel and Microsoft Defender to support our Managed Detection and Response (MDR) services within a Security Operations Center (SOC) environment.

This role is designed for an experienced Tier 1 / Tier 2 SOC Analyst who performs threat detection, investigation, and response activities. The successful candidate will operate in a client-facing MSSP environment and will contribute directly to the quality, effectiveness, and continuous improvement of EY's MDR services.

Your role at a glance

Key responsibilities

Security Monitoring and Incident Response

• Perform security monitoring, triage, and investigation of alerts generated from Microsoft Sentinel and Microsoft Defender platforms using documented playbooks.
• Escalate confirmed or complex incidents, including suspected compromise, lateral movement, persistence mechanisms, and data exfiltration scenarios.
• Perform investigations using log analytics, endpoint telemetry, identity signals, and cloud-native audit logs.
• Validate, scope, and document security incidents, including root cause analysis and impact assessment.
• Assist with containment and recovery under senior guidance.

Detection Engineering and Use Case Development

• Support tuning and maintenance of Sentinel analytics rules.
• Assist with false positive reduction and improving signal quality across Sentinel and Defender data sources.
• Contribute to use case development under guidance to enhance detections, hunting queries, and alert enrichment.

Threat Hunting

• Support threat hunting activities
• Identify anomalous or suspicious activity that may not trigger existing detections.
• Document hunting hypotheses, findings, and recommendations for detection improvements or control gaps.

Client Engagement and Technical Advisory

• Participating in client calls when required
• Supporting onboarding and steady-state operations
• Support senior team members in identifying logging, configuration improvements.
• Support onboarding and steady-state operations for MDR clients within a managed services context.

Operational Excellence

• Contribute to playbooks and procedural improvements.
• Participate in knowledge sharing and case reviews.
• Assist with service quality improvements, detection maturity, and operational consistency across clients.
• Ensure investigations and responses align with applicable regulatory, contractual, and evidentiary requirements.

Skills and attributes for success

• Proven experience operating in a SOC or MSSP environment at a Tier 1 or Tier 2 level.
• Hands-on expertise with Microsoft Sentinel, including analytics rules, KQL, workbooks, and incident investigations.
• Experience with Microsoft Defender technologies, including Defender for Endpoint and identity-related signals.
• Exposure to investigations across cloud, endpoint, and identity domains.
• Working understanding of attack techniques, threat actor behaviors, and incident response methodologies.
• Ability to manage multiple investigations simultaneously while maintaining investigation quality and documentation.
• Strong written and verbal communication skills, with the ability to explain technical findings to security-focused audiences.
• Proficiency in French, including Quebec French, is desired for client-facing engagements.

Qualifications

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related discipline.
• Relevant certifications such as: Microsoft Certified: Azure Security Engineer Associate, Microsoft Sentinel specialization
• CISSP, GCED, GCIA, or similar (preferred, not required)
• Minimum 1-2 years of experience in cybersecurity operations, with significant time spent in incident response and security monitoring roles.
• Prior experience in a client-facing or managed services environment is strongly preferred
• We currently have opportunities in our Dieppe office for full-time evening, overnight and weekend work.

What we offer

When you thrive, we thrive. The EY benefits package goes above and beyond, focusing on your physical, emotional, financial and social well-being:

• $5,000 per year for mental health support benefits

EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.

• Dieppe, New Brunswick: $48,000 to $72,000

Inclusiveness at EY

Inclusiveness is at the heart of who we are and how we work. We're committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting our neuroinclusion and accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible

use of AI, and our practices are continuously reviewed and refined to ensure they align with the highest ethical principles and regulatory requirements.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.