Investigates and qualifies escalated SOC alerts involving phishing, account compromise, malware, and lateral movement. Correlates events across security platforms, enriches investigations with logs, indicators of compromise, and threat intelligence, determines severity and impact, and recommends or initiates mitigation and escalation actions. Documents findings, analyzes endpoint and network artifacts, coaches Level 1 analysts, improves detection rules and playbooks, and uses approved automation and AI tools.
Overview:
- The client is looking for an IT security analyst for its
SOC, positioned at level 2: alerts reach this person already escalated by level
1, and the person in turn acts as the technical escalation point for those
analysts.
- The work centres on investigation: qualifying phishing,
account compromise, malware or lateral movement cases, correlating events
across several platforms, then enriching them with logs, indicators of
compromise and threat intelligence.
- The person determines verdict, severity and impact, then
recommends or initiates first measures according to established processes, with
incident response remaining initial and carried out with other teams.
- The form title specifies no level, while the full set of
responsibilities describes a level 2 role.
- The Talents and qualifications section is empty: no degree,
certification, language or named tool is required, so assessment rests entirely
on the activity profile.
- Target candidate: a QA professional with at least 10 years
in IT, including 5 years in testing, who has coordinated testing within agile
teams and uses JIRA, XRAY, Cypress and Playwright in recent mandates.
- Group insurance exposure or an integration project will set
apart otherwise equal candidates.
Requirements
Required:
- Analysis and qualification of escalated alerts (phishing,
account compromise, malware, lateral movement)
- Event correlation (SIEM, XDR, EDR, identity, email, network,
cloud)
- Alert enrichment (logs, indicators of compromise, threat
intelligence)
- Determination of verdict, severity, potential impact and
required actions
- Initial mitigation, containment or escalation measures,
recommended or initiated per processes
- Documentation of investigations, findings, decisions and
actions
- First-level technical analysis of endpoint and network logs
and artefacts
- Support and coaching of level 1 SOC analysts on complex
cases
- Improvement of detection rules, investigation queries,
runbooks and playbooks
- Use of approved AI and automation tools (triage, enrichment,
documentation)
Similar Jobs
Big Data • Fintech • Mobile • Payments • Financial Services
Own the vision and roadmap for Affirm’s consumer loyalty program, launching rewards, tiers, engagement loops, and redemption experiences. Lead program economics, experimentation, incrementality, LTV measurement, and reward optimization. Partner with Risk, Credit, Legal, Compliance, Finance, Marketing, engineering, and design to deliver compliant products and drive repeat usage, retention, share of wallet, and incremental GMV.
Top Skills:
AmplitudeClaude CodeCursorSQL
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Architect and own marketing data infrastructure, Databricks pipelines, Gold Layer tables, semantic models, and AI-enabled data products. Lead complex cross-team initiatives, translate ambiguous business needs into scalable solutions, ensure data quality and reliability, and mentor engineers and analysts. Build, evaluate, and monitor production LLM and agent systems while automating marketing and go-to-market workflows with AI. Partner with BI, Data Science, Marketing, Sales, and R&D teams to support self-service analytics and trusted business KPIs.
Top Skills:
Ai AgentsBigQueryClaude CodeCursorData WarehousesDatabricksDbtEltETLLakehouse ArchitecturesLlmsPythonSalesforceSemantic LayersSnowflakeSQLStreamlit
3 Hours Ago
Easy Apply
Easy Apply
Big Data • Fintech • Mobile • Payments • Financial Services
Leads Marketing and Consumer Privacy Engineering teams, developing engineers and establishing a shared operating model. Translates business and product priorities into engineering plans across logged-out web, experimentation, marketing integrations, attribution, measurement, consent, privacy experiences, and consumer data collection. Partners with Product, Marketing, Privacy, Legal, and Engineering stakeholders to deliver reliable, scalable, privacy-aware systems while balancing customer needs, quality, speed, and risk.
Top Skills:
AnalyticsAttributionAustralian Privacy ActCcpa/CpraConsent ManagementCookiesGdprInstrumentationMarketing TechnologyMeasurement SystemsTaggingWeb Experimentation
What you need to know about the Calgary Tech Scene
Employees can spend up to one-third of their life at work, so choosing the right company is crucial, not just for the job itself but for the company culture as well. While startups often offer dynamic culture and growth opportunities, large corporations provide benefits like career development and networking, especially appealing to recent graduates. Fortunately, Calgary stands out as a hub for both, recognized as one of Startup Genome's Top 100 Emerging Ecosystems, while also playing host to a number of multinational enterprises. In Calgary, job seekers can find a wide range of opportunities.
