company_site

Security Operations Centre (SOC) Analyst - Night Shift

Cybera

Calgary, CAN

Full-time

Entry

Onsite

Discovered 4 days ago

Communication

Apply

Role Overview

Are you passionate about cybersecurity?

Are you eager to apply your technical and investigative skills for the public good?

If so, we have an exciting opportunity for you!

Cybera is a not-for-profit agency whose mission is to improve the lives of Albertans through the use and advancement of digital technologies.

We serve the province’s education, research and government sectors.

To support the higher education sector in defending themselves from online harms, Cybera has established a regional Security Operations Centre (rSOC) to monitor, detect, and respond to cybersecurity threats..

As a SOC Analyst (night shift), you will have an opportunity to respond to incidents and make a real-world impact.

Working independently overnight, your key factors for success include the ability to effectively identify and investigate incidents, manage escalations, and work with our member institutions throughout the incident lifecycle.

Cybera is committed to continuous learning and professional development so you can advance your cybersecurity skills and experience while helping us safeguard post-secondary institutions.

What you’ll do

• Conduct proactive monitoring, investigation, and escalation of security incidents.

• Identify potential or suspected intrusion attempts and compromises by analyzing relevant event details and summary information.

• Investigate malicious URLs, domains, and IPs using open-source and sector intelligence.

• Provide mitigation guidance and support in response to identified threats, based on common industry practices and vendor recommendations.

• Continuously develop and refine investigative methods for anomalous or suspicious events, in collaboration with other rSOC team members.

• Actively contribute to and maintain the knowledge base for rSOC processes and procedures.

• Utilize playbooks, guidelines, and various techniques for investigating incidents.

• Report gaps in log coverage, parsing issues, and high-volumes of false positives.

• Act as the first point of contact for member-reported security incidents and service requests in accordance with established SLAs.

• Apply cybersecurity and privacy principles to meet organizational requirements.

What you bring

Key Skills for This Role

Communication

Full Job Posting

What you’ll do

Conduct proactive monitoring, investigation, and escalation of security incidents.
Identify potential or suspected intrusion attempts and compromises by analyzing relevant event details and summary information.
Investigate malicious URLs, domains, and IPs using open-source and sector intelligence.
Provide mitigation guidance and support in response to identified threats, based on common industry practices and vendor recommendations.
Continuously develop and refine investigative methods for anomalous or suspicious events, in collaboration with other rSOC team members.
Actively contribute to and maintain the knowledge base for rSOC processes and procedures.
Utilize playbooks, guidelines, and various techniques for investigating incidents.
Report gaps in log coverage, parsing issues, and high-volumes of false positives.
Act as the first point of contact for member-reported security incidents and service requests in accordance with established SLAs.
Apply cybersecurity and privacy principles to meet organizational requirements.

Education and experience

Cybersecurity diploma or equivalent technical training in cybersecurity.
Relevant certifications preferred, such as CompTIA Security+, CySA+, or similar qualifications.
Demonstrated passion for cybersecurity and a commitment to continuous learning.
Hands-on experience through academic projects, Capture the Flag (CTF) competitions, or practical labs (e.g. HackTheBox, LetsDefend) is highly desirable.
Familiarity with following documented cybersecurity processes and procedures, along with a strong willingness to learn incident response workflows.
Previous experience working night shifts or working independently is an asset.
Understanding of cybersecurity threats and risks to the academic sector.
Experience in identifying and investigating security incidents.
Practical understanding of cybersecurity concepts, such as incident response practices, vulnerability management, and IT service management.
Technical proficiencies
Experience with SIEM and UEBA technologies, and following playbooks for incident response.
An understanding of the MITRE ATT&CK framework.
Experience with investigating suspicious sign-ins, phishing, malware, and network log analysis.
Ability to document and explain technical information clearly and concisely to diverse audiences.
An understanding of TCP/IP and other network protocols.
Experience with using threat intelligence feeds; problem solving and analytical thinking skills.
Strong documentation and communication skills.
These requirements represent an ideal candidate. The potential of the individual’s background and experience to meet the responsibilities and expectations of the role is considered in all instances.
This is your opportunity to be a part of a newly formed rSOC that will change the security landscape for post-secondary institutions!
Schedule and conditions of employment
The rSOC operates 24 hours a day, 7 days a week. This role is for a dedicated night shift covering overnight hours from 10:00 pm to 6:00 am ABT (Alberta time), including weekends and holidays.
Selected candidates will be required to provide a satisfactory employment and criminal record check as a condition of employment.
Compensation and location
Preference will be given to Calgary, Alberta residents; however, remote work within Canada will also be considered. Salary will be commensurate with experience. No relocation costs will be awarded.
Benefits of working at Cybera
A remote working environment.
Highly supportive and inclusive work culture.

Skills

Understanding of cybersecurity threats and risks to the academic sector.
Experience in identifying and investigating security incidents.
Practical understanding of cybersecurity concepts, such as incident response practices, vulnerability management, and IT service management.
Technical proficiencies
Experience with SIEM and UEBA technologies, and following playbooks for incident response.
An understanding of the MITRE ATT&CK framework.
Experience with investigating suspicious sign-ins, phishing, malware, and network log analysis.
Ability to document and explain technical information clearly and concisely to diverse audiences.
An understanding of TCP/IP and other network protocols.
Experience with using threat intelligence feeds; problem solving and analytical thinking skills.
Strong documentation and communication skills.
These requirements represent an ideal candidate. The potential of the individual’s background and experience to meet the responsibilities and expectations of the role is considered in all instances.
This is your opportunity to be a part of a newly formed rSOC that will change the security landscape for post-secondary institutions!
Schedule and conditions of employment
The rSOC operates 24 hours a day, 7 days a week. This role is for a dedicated night shift covering overnight hours from 10:00 pm to 6:00 am ABT (Alberta time), including weekends and holidays.
Selected candidates will be required to provide a satisfactory employment and criminal record check as a condition of employment.
Compensation and location
Preference will be given to Calgary, Alberta residents; however, remote work within Canada will also be considered. Salary will be commensurate with experience. No relocation costs will be awarded.
Benefits of working at Cybera
This is your opportunity to work for a flexible, tech-forward not-for-profit that is helping Canada become a more equitable place to work, learn, and play! We offer:
A remote working environment.
Highly supportive and inclusive work culture.

Preferred Qualifications

Relevant certifications preferred, such as CompTIA Security+, CySA+, or similar qualifications.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More jobs at Cybera