Lead complex cybersecurity investigations as a Tier III SOC Analyst, using digital forensics and threat hunting to protect financial technology infrastructure.

Reporting to the Leader, Security Incident Management, you will own sophisticated incidents and strengthen enterprise-wide resilience. The role combines incident response, malware analysis, threat intelligence, and cross-functional coordination. You will support systems enabling millions of transactions while serving as a senior escalation point for emerging threats.

Key Responsibilities:

- Lead containment, eradication, recovery, and root cause analysis
- Conduct forensics across endpoints, servers, networks, and cloud
- Lead proactive threat hunting using cyber threat intelligence
- Develop detection use cases, analytics, and tuning rules




- Create playbooks, remediation plans, and post-incident reports

Requirements:

- Extensive incident response and digital forensics experience
- Advanced malware, memory, host, and network forensics expertise
- Experience with Sentinel, Splunk, LogRhythm, or QRadar
- Knowledge of Windows, Linux, macOS, cloud, and on-premises environments
- Robust English communication and after-hours on-call availability

Apply advanced incident response, threat hunting, and forensic expertise to protect critical financial technology systems and infrastructure.

📌 Tier III Cybersecurity Incident Analyst (Toronto)
🏢 Altis
📍 Toronto