SOC Team Lead

Large incident response engagements can involve 20 or more responders working in shifts for weeks. Annual revenue from managed services has grown every year since 1995.

The position:

We are creating this position because the workload has grown. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. We are headquartered in Montreal and have been hiring remotely since 2020. We engage team members in India as full-time contractors. Most of our contractors have been with us for more than two years. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. We talk mostly in Slack and hop on quick calls when something needs discussing.

What you'll be doing:

• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Write and update SOC runbooks and playbooks.
• Check threat intelligence feeds and IOCs against our environment.
• Report on security awareness training and phishing simulation results.
• Document incidents with timeline, impact and root cause.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.

What you need:

• Familiarity with the MITRE ATT&CK framework.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Working knowledge of SIEM and EDR tools.
• Basic scripting in PowerShell or Python.
• Clear written communication for incident tickets and reports.

Schedule: Day shift with one week of on-call every six weeks

$3,600 - $4,700 per month

Pay and benefits:

• Monthly payments via wire transfer or Wise.
• Flexible hours.
• Monthly internet allowance.
• Company laptop.

Please include your notice period and salary expectations.

Duration: 6 months. Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cedartrack.