Responsibilities

Conduct threat analysis, assessment, and malware analysis in support of security investigations and incident response processes

Lead investigations into security incidents escalated from lower-tier SOC analysts

Provide technical mentorship to Tier 1 and Tier 2 SOC analysts, sharing knowledge on incident response, threat detection, and advanced cybersecurity techniques

Conduct root cause analysis and identify containment and remediation actions

Recognize and research attacker tools, tactics, and procedures (TTP) in indicators of compromise (IOCs) that can be applied to current and future investigations

Collaborate with technical and business teams to drive security initiatives acting as the SME

Conduct threat hunting activities to proactively identify potential threats and vulnerabilities within the network

Develop and maintain playbooks and documentation to ensure consistent and effective processes

Participate in security audits and assessments to ensure compliance with industry standards and regulations

Provide after-hour support as needed and participate in on-call rotation

Qualification

Represents the skills you have

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Incident ResponseMalware AnalysisHost ForensicsNetwork Traffic AnalysisThreat HuntingCloud SecurityAzure SentinelSplunkMicrosoft Defender Security SuiteKQLSPLPowerShellRequired

Bachelor's degree in cybersecurity, computer science, information technology, or related field

5+ years experience in a Security Operations Center or Technical Incident Response role

Strong knowledge of incident response methodologies, including NIST 800-61

Proven track record of handling advanced and complex security incidents

Demonstrated experience in computer security-related disciplines such as incident response, host forensics, malware analysis, container security, network traffic analysis, Insider Threat, alert tuning, and trend analysis

Strong knowledge of cloud security in Azure, AWS, GCP

Extensive experience working with security tools such as Azure Sentinel, Splunk, Microsoft Defender Security Suite, firewalls, IDS/IPS, antispam, content management, server and network device hardening, etc

Strong understanding of security concepts and threat categories (such as malware, phishing attacks, Defense-in-Depth, MITRE ATT&CK framework, Cyber Kill Chain, etc.)

Strong knowledge of Windows, Linux, and Mac OS

Advanced Experience with query languages such as KQL and SPL

Experience with scripting languages such as Bash, PowerShell, or Python

The ability to effectively communicate both verbally and in writing to audiences of different technical skill levels

Strong analytical and troubleshooting abilities to investigate, identify, and resolve security incidents quickly and effectively

Capability to remain calm, composed, and focused during high-pressure situations, ensuring a clear and effective incident response

Ability to conduct forensic analysis of network packet captures, DNS, proxy, and host-based security logs

Acknowledge the presence of choice in every moment and take personal responsibility for your life

Possess an entrepreneurial spirit and continuously innovate to achieve great results

Communicate with honesty and kindness and create the space for others to do the same

Lead with courage, knowing the possibility of greatness is bigger than the fear of failure

Foster connection by putting people first and building trusting relationships

Integrate fun and joy as a way of being and working, aka doesn't take yourself too seriously

Applicants must be authorized to work in Canada

Benefits

Permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.

Extended health and dental benefits, and mental health plans

Paid time off

Savings and retirement plan matching

Generous employee discount

Fitness & yoga classes

Parenthood top-up

Extensive catalog of development course offerings

People networks, mentorship programs, and leadership series

Hybrid workplace arrangement