Cybersecurity Analyst I

Large incident response engagements can involve 20 or more responders working in shifts for weeks. Annual revenue from managed services has grown every year since 1995.

The role

We're looking for a Cybersecurity Analyst I to join our team. This is a remote role. The Cyber Defense team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Our team is spread across 17 countries. Headquarters is in Montreal. Employment is through our payroll partner in the US. Salary is paid monthly in USD. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET.

Duties

• Help with user access reviews and offboarding audits.
• Tune noisy detection rules with the security engineering team.
• Report on security awareness training and phishing simulation results.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Document incidents with timeline, impact and root cause.
• Hand off open cases at shift change with clear notes.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.

Qualifications

• 1+ years in an SOC, security analyst or IT security role.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Clear written communication for incident tickets and reports.
• Must be able to pass a background check.
• Basic scripting in PowerShell or Python.

Preferred

• KQL or SPL query writing.
• CySA+, GCIH, GCIA or BTL1 certification.
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines.
• Malware analysis in a sandbox.

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Rate: $94,000 - $111,000 per year

Perks and benefits

• Paid parental leave.
• 24 days paid time off.
• Flexible hours.
• Home office setup budget.
• Performance bonus.

We are an equal opportunity employer and value diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Interview process: a phone call, a meeting with the hiring manager, and a final conversation with the team.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cedartrack.