Threat Analyst 3 (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Remote within Canada; candidates must reside in and be authorized to work in Canada. Standard shift is 8AM–5PM EST, with willingness to work outside standard hours, including weekends and holidays, for a 24x7x365 MDR service.
Salary: CA$76,000–CA$126,000 base salary plus bonus eligibility and benefits. The posting also states a Canada base salary range of $74,000–$123,000.
Company
provides cybersecurity products and managed threat response services for customer environments.
What you will do
- Investigate logs and security events using tooling, enterprise systems, endpoint collections, and log analysis platforms.
- Identify, investigate, and respond to cyber threats in customer environments.
- Communicate and document findings for technical and executive customer audiences.
- Follow incidents through resolution, respond to inbound customer requests, and provide recommendations that reduce customer risk.
- Collaborate with threat hunters, incident response analysts, engineers, ethical hackers, and other security teams.
- Research emerging indicators of compromise and attack, exploits, and vulnerabilities, then operationalize findings to improve customer protection.
Requirements
- Minimum 4+ years of experience in a SOC environment or computer security team within an IT environment.
- Experience with threat hunting, endpoint security monitoring, and network security monitoring.
- Experience administering and supporting Windows workstations and servers, plus Apple or Linux-based operating systems.
- Knowledge of adversary tactics and techniques, including obfuscation, persistence, and defense evasion; the MITRE ATT&CK framework; and incident response procedures.
- Basic understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols, plus Windows event log analysis.
- Experience constructing SQL queries, using OSQuery, and managing enterprise information security data, including SIEM experience.
- Proficient PowerShell knowledge and programming or scripting skills.
- Excellent troubleshooting, analytical, written, and verbal communication skills, with a customer service-oriented approach.
- Ability to work effectively both independently and within a team, learn new skills quickly, and contribute an innovative mindset.
- Passion for information technology and cybersecurity.
Culture & Benefits
- Remote work is available within the specified location of Canada.
- Participation in a 24x7x365 managed threat response service requires work outside standard business hours, including weekends and holidays.
- Bonus eligibility and a comprehensive benefits package are offered.
- Inclusive workplace committed to equal employment opportunities, diverse perspectives, growth, and reasonable accommodation.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →