Analyst, Security Operations Centre

Montreal, Quebec, Canada

Full-time

Onsite

Entry, Mid Level

Cogeco Connexion is a company committed to creating a dynamic and inclusive workplace. They are seeking an Analyst for their Security Operations Centre to monitor security alerts, respond to incidents, and support vulnerability management efforts.

Apply Now

Responsibilities

Continuously monitor security alerts generated by SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), IDS/IPS (Intrusion Detection/Prevention Systems), firewalls, and other security tools
Perform initial triage and analysis of security events to determine their validity, severity, and potential impact
Distinguish between false positives and legitimate security incidents, escalating as necessary
Investigate suspicious activities, anomalies, and potential security breaches using various forensic tools and techniques
Correlate security events from multiple sources to identify patterns, attack vectors, and compromised systems
Enrich alerts with relevant threat intelligence to gain a deeper understanding of the attack
Execute initial incident response procedures, including containment actions to limit the spread and impact of threats
Follow established playbooks and procedures for incident handling
Collaborate with other IT teams (e.g., Network, Systems, Applications) to coordinate response efforts
Identify potential vulnerabilities in systems and applications based on security alerts and threat intelligence
Support vulnerability scanning and assist in the prioritization of remediation efforts
Accurately document all security incidents, investigations, and actions taken in the incident management system
Prepare and deliver clear, concise reports on security events, incidents, and trends to relevant stakeholders
Contribute to the development and refinement of SOC processes, playbooks, and standard operating procedures (SOPs)
Stay up-to-date with the latest cybersecurity threats, trends, vulnerabilities, and attack techniques
Actively participate in threat hunting activities to proactively identify hidden threats within the environment
Contribute to improving detection capabilities by fine-tuning security tools and recommending new rules or signatures
Communicate effectively with internal teams and external parties (as required) during security incidents
Participate in security awareness training initiatives for employees

Qualification

Required

Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent practical experience)
Relevant security certifications: CISSP, SANS GIAC (GCIH, GCIA, GCFE, GNFA, GSEC), Offensive Security (OSCP), CompTIA CySA+, CASP+, or similar certifications
Minimum of 1-3 years of hands-on experience in a Security Operations Center (SOC) environment or similar cybersecurity role
Strong understanding of security concepts, including network security, endpoint security, cloud security, and data security
Knowledge of common attack techniques (e.g., phishing, malware, DDoS, privilege escalation) and mitigation strategies
Strong analytical, problem-solving, and critical thinking skills
Ability to work independently and collaboratively in a fast-paced environment
Strong written and verbal communication skills
Proven ability to work with multiple operating systems technology