Tier 2 SOC Analyst: Incident Response & Threat Hunting

Vanderlande; Vancouver; On-site; CAD 90,000 - 130,000; Full time

Job summary

Vanderlande in Vancouver is seeking a Cybersecurity Analyst - Tier 2 to lead complex investigations, coordinate incident response, and drive improvements in threat detection and response capabilities.

You will serve as a technical expert and escalation point for Tier 1 analysts, customers or other departments, supporting incident detection and response activities within client environments.

Qualifications

• 5+ years of experience in cybersecurity, with at least 2 years in a SOC or IR role.
• Advanced expertise in SIEM, EDR, and forensic tools.
• Strong understanding of MITRE ATT&CK framework and threat actor TTPs.
• Experience with scripting and automation (e.g., Python, PowerShell).
• Ability to lead and manage incident response efforts under pressure.
• Relevant security certifications from ISC2 or ISACA
• Excellent communication and leadership skills.

Responsibilities

• Perform advanced analysis of escalated security incidents and support investigation efforts.
• Act as an escalation point for Tier 1 analysts and provide expert guidance during incident response activities.
• Develop and tune detection rules and use cases in SIEM and other platforms.
• Perform threat hunting based on intelligence and behavioral analysis.
• Conduct forensic analysis and reverse engineering of malware when needed.
• Collaborate with threat intelligence teams to enrich investigations.
• Provide strategic recommendations to improve SOC processes and technologies.
• Mentor junior analysts and contribute to training programs.
• Participate in detection validation and lessons‑learned activities to enhance SOC detection and response.

Skills

SIEM

EDR

Forensic tools

MITRE ATT&CK

Python

PowerShell

Incident leadership

Education

Bachelor's degree in IT, Cybersecurity, or CS

Tools

Threat intelligence platforms

EDR

IDS/IPS

Job description

Vanderlande in Vancouver is seeking a Cybersecurity Analyst - Tier 2 to lead complex investigations, coordinate incident response, and drive improvements in threat detection and response capabilities.

You will serve as a technical expert and escalation point for Tier 1 analysts, customers or other departments, supporting incident detection and response activities within client environments.