Real-Time Threat Detection: Monitor, triage, and analyze security alerts generated by SIEM, EDR, NDR, and identity platforms (e.g., Splunk, Microsoft Sentinel, Crowd

Strike, Sentinel

One).

Incident Response & Containment: Execute initial containment procedures for confirmed incidentsisolating compromised hosts, blocking malicious IPs/hashes, and revoking compromised credentials.

Alert Investigation & Forensics: Perform deep-dive root-cause analysis on security events, examining raw log data, network captures (PCAPs), payload samples, and email headers.

Threat Hunting: Proactively search across telemetry logs for undetected adversary activity using MITRE ATT&CK; techniques and the latest threat intelligence advisories.

What you must have: Experience: 24 years in a SOC Analyst (Tier 2)



or Incident Response role.

Technical Proficiency: Hands-on experience with SIEM platforms, EDR solutions, and security orchestration platforms (SOAR).

Core Skills: Strong understanding of TCP/IP networking, OS internals (Windows, Linux, macOS), memory/host artifacts, and common attack vectors (phishing, ransomware, credential abuse).

Thank you for your interest in this opportunity.

If you are selected to move forward in the process, we will contact you directly.

If you do not hear from us, we encourage you to continue visiting our website for other roles that may be a positive fit.

📌 SOC Specialist (Montreal)
🏢 TEEMA
📍 Montreal