Senior SOC Analyst

A BIT ABOUT US

Products include endpoint protection, email security and a cloud posture management platform. Cotter Labs protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

We are backfilling a position after an internal move. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. The SOC team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. The company is based in Halifax, Canada. We are a distributed team spread across a few time zones. Employment is through our payroll partner in India. Salary is paid monthly in Indian rupees. You will need at least 4 hours of overlap with US Eastern time. Please make sure you have dependable internet and backup power.

KEY RESPONSIBILITIES

• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Help with user access reviews and offboarding audits
• Write and update SOC runbooks and playbooks
• Hand off open cases at shift change with clear notes
• Escalate confirmed incidents and follow the incident response plan
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners

WHO YOU ARE

• 5-7 years in an SOC, security analyst or IT security role
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Experience reading Windows Event Logs, Sysmon and Linux logs

BONUS POINTS

• Malware analysis in a sandbox
• KQL or SPL query writing
• Prior help desk or network administration experience

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

WHAT YOU GET

• 20 days paid time off
• Public holidays observed per your country
• Annual salary review
• Wellness allowance

If you are shortlisted, we will reach out to set up a first call.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cotter Labs.