- Security monitoring and incident response
- Lead day-to-day security alert monitoring activities (EDR, SIEM, email security, M365 security, etc.).
- Perform in-depth analysis and investigation of security events to distinguish false positives from real incidents.
- Handle medium- to high-severity incidents (phishing, malware, account compromise, data exfiltration, etc.) and coordinate actions with IT teams and stakeholders.
- Document incidents, root causes and remediation steps, and improve procedures based on lessons learned.
- Provide guidance and oversee implementation of access controls (least privilege, role-based access, onboarding, transfers and offboarding).
- Analyze vulnerability scan results and help prioritize remediation based on risk and criticality.
- Contribute to continuous improvement of the vulnerability management program (SLAs, reporting, dashboards, etc.).
- Help develop and maintain security procedures, standards and operational guides.

Requirements - Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience.

- Typically 5+ years of experience in cybersecurity, in a Security Operations Center (SOC), incident response, or infrastructure security within an enterprise environment.
- Strong understanding of the following: Networks: TCP/IP, VPN, firewalls, proxies, DNS, routing.
- Operating systems: Windows Server, Windows desktops and basic knowledge of Linux.
- Core services: Active Directory, Microsoft 365 (M365/O365), virtualization and basic cloud (Azure and/or AWS).




- Hands-on experience with several of the following technologies: Endpoint security and EDR solutions (e.g., CrowdStrike or equivalent).
- SIEM and log management (use-case creation, analysis and tuning).
- Vulnerability and patch management (e.g., Tanium, Qualys).
- Email and Microsoft 365 security controls, web filtering and identity security (MFA, conditional access).

Core Competencies

Demonstrates expertise in security monitoring, incident response, and vulnerability management, with a solid foundation in network security and access control implementation. Proficient in analyzing security events and coordinating with IT teams to enhance security procedures and standards. Highest-signal resume keywords - Security Monitoring

- Incident Response
- Vulnerability Management
- EDR Solutions
- SIEM and Log Management ATS Optimization Keywords Hard Skills - Cybersecurity
- Network Security
- TCP/IP
- Active Directory
- Microsoft 365
- Endpoint Security
- Vulnerability Management
- Incident Analysis
- Access Control Implementation
- Operating Systems Soft Skills - Analytical Thinking
- Communication
- Collaboration
- Problem-Solving
- Leadership Industry Keywords - Security Operations Center
- Incident Response
- Phishing
- Malware
- Data Exfiltration
- Risk Management
- Cloud Security
- Operational Guides
- Security Procedures
- Root Cause Analysis Tools & Technologies - CrowdStrike
- Tanium
- Qualys
- Azure
- AWS
- SIEM
- EDR
- Email Security
- Web Filtering
- Identity Security

📌 Senior Cybersecurity Analyst (Boisbriand)
🏢 Jobtailor
📍 Boisbriand