IT Security Analyst (SOC) - GC1721-09

Quebec/montreal, QCOnsiteFull TimePosted 1 month ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

SIEM
XDR
EDR
identity
email
network
cloud
phishing
account compromise
malware

Nice to have

group insurance exposure
integration project

Role summary

The client seeks a Level 2 IT Security Analyst for their Security Operations Center (SOC). This role focuses on investigating escalated alerts related to phishing, account compromise, malware, and lateral movement. The analyst will correlate events across various platforms, enrich data with logs and threat intelligence, and determine verdicts, severity, and impact. Responsibilities include recommending or initiating mitigation measures, documenting findings, performing technical analysis of logs, supporting junior analysts, and improving detection rules and automation tools. The ideal candidate will have at least 10 years of IT experience, with 5 years in testing and experience coordinating within agile teams using JIRA, XRAY, Cypress, and Playwright.

Overview:

The client is looking for an IT security analyst for its SOC, positioned at level 2: alerts reach this person already escalated by level 1, and the person in turn acts as the technical escalation point for those analysts.
The work centres on investigation: qualifying phishing, account compromise, malware or lateral movement cases, correlating events across several platforms, then enriching them with logs, indicators of compromise and threat intelligence.
The person determines verdict, severity and impact, then recommends or initiates first measures according to established processes, with incident response remaining initial and carried out with other teams.
The form title specifies no level, while the full set of responsibilities describes a level 2 role.
The Talents and qualifications section is empty: no degree, certification, language or named tool is required, so assessment rests entirely on the activity profile.
Target candidate: a QA professional with at least 10 years in IT, including 5 years in testing, who has coordinated testing within agile teams and uses JIRA, XRAY, Cypress and Playwright in recent mandates.
Group insurance exposure or an integration project will set apart otherwise equal candidates.

Requirements

Required:

Analysis and qualification of escalated alerts (phishing, account compromise, malware, lateral movement)
Event correlation (SIEM, XDR, EDR, identity, email, network, cloud)
Alert enrichment (logs, indicators of compromise, threat intelligence)
Determination of verdict, severity, potential impact and required actions
Initial mitigation, containment or escalation measures, recommended or initiated per processes
Documentation of investigations, findings, decisions and actions
First-level technical analysis of endpoint and network logs and artefacts
Support and coaching of level 1 SOC analysts on complex cases
Improvement of detection rules, investigation queries, runbooks and playbooks
Use of approved AI and automation tools (triage, enrichment, documentation)

Ready to apply?

You'll be redirected to Maarut's application page.