Toronto, Ontario M5V 3L9 Posted September 16th, 2026

Job Type: Full Time

Job Category: IT

Job Title: SOC Analyst

Job Type: Full Time

Location: Toronto, ON (Hybrid)

We are seeking an experienced SOC Analyst to join our cybersecurity operations team. The ideal candidate will have hands-on experience in security monitoring, incident detection and response, SIEM, EDR/XDR, threat analysis, and vulnerability management. The candidate will be responsible for monitoring security events, investigating alerts, identifying potential threats, performing incident triage, and supporting incident response activities across enterprise environments.

Key Responsibilities

- Monitor and analyze security alerts and events using SIEM, EDR/XDR, and other security monitoring tools.
- Investigate security incidents, suspicious activities, malware alerts, phishing attempts, unauthorized access, and potential threats.
- Perform incident triage, investigation, containment, eradication, and recovery activities.
- Analyze security logs from firewalls, servers, endpoints, applications, cloud environments, and network devices.
- Conduct threat hunting and identify indicators of compromise (IOCs), attack patterns, and emerging threats.
- Perform root cause analysis and document security incidents, findings, and remediation activities.
- Support vulnerability assessments, remediation activities, and security risk tracking.
- Develop and maintain security monitoring rules, alerts, dashboards, and reports.
- Correlate events across multiple security platforms to identify potential security incidents.
- Collaborate with infrastructure, network, cloud, application, and IT teams to investigate and remediate security issues.




- Participate in security investigations, incident response exercises, and continuous improvement of SOC processes.
- Maintain accurate documentation of incidents, investigations, procedures, and security controls.

Required Technical Skills

- 3–7+ years of experience in SOC, cybersecurity, security operations, incident response, or security monitoring.
- Strong hands-on experience with SOC operations and security monitoring.
- Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or equivalent.
- Experience with EDR/XDR platforms such as Microsoft Defender, CrowdStrike, SentinelOne, or equivalent.
- Solid knowledge of network security concepts including TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, IDS/IPS, and proxies.
- Experience analyzing Windows and Linux security logs.
- Knowledge of vulnerability management and remediation.
- Understanding of common cyber threats, malware, phishing, credential attacks, and network-based attacks.
- Familiarity with MITRE ATT&CK;, IOC analysis, threat intelligence, and security incident investigation.
- Knowledge of Azure and/or AWS security concepts is preferred.
- Scripting or automation experience using Python, PowerShell, or Bash is an asset.
- Strong analytical, troubleshooting, communication, and documentation skills.

Security Frameworks & Standards

- Knowledge of NIST, ISO 27001, SOC 2, PCI DSS, or other cybersecurity frameworks is preferred.

Preferred Certifications

- CompTIA Security+
- CompTIA CySA+
- CEH
- GCIH
- GCIA
- CISSP or equivalent cybersecurity certification

Job Details

- Job Type: Full Time
- Location: Toronto, ON
- Work Model: Hybrid

Required Skills

Cloud Developer Data Analyst DevOps Engineer Technical Project Manager

📌 SOC Analyst (Toronto)
🏢 Realign
📍 Toronto