Security Operations Analyst II

📋 Description

• Remote/work from Canada; Tier 1–2 security operations role with ownership of triage, structured
• Handle day-to-day alert queue, investigate escalated/ambiguous cases, and collaborate with senior
• Work with experienced colleagues and mature toolsets; bring investigative mindset from day one.

🎯 Requirements

• 2–4+ years in a SOC or security operations role with direct alert triage responsibility
• Strong understanding of MITRE ATT&CK framework for labeling attacker behavior
• Working knowledge of EDR tooling (process tree analysis, behavioral detection review, endpoint
• Familiarity with SIEM-based investigations; log querying, cross-source correlation, and timeline
• Understanding of foundational network protocols and how attackers abuse them
• Exposure to cloud security monitoring (AWS/GCP), including audit log review and IAM alert

🎁 Benefits

• Equal-opportunity employer with commitment to a respectful work environment
• Reasonable accommodations for qualified applicants with protected disabilities