Support SOC operations in Toronto by monitoring alerts, escalating incidents, and applying SIEM, EDR, and threat detection expertise. This permanent full-time role works Monday to Friday. Reporting to the Manager, Cyber Defense, you will support the Office of the Chief Information Security Officer. The work covers Cyber Defense activities, security tools, incident response, and operational threat intelligence. You will collaborate with IT teams, external partners, and service providers across the City.
Key Responsibilities
- Monitor SOC alerts and escalate incidents when needed
- Support threat detection and incident response activities
- Maintain SIEM, EDR, NDR, WAAP, and SOAR tools
- Apply basic operational and tactical cyber threat intelligence
- Prepare security metrics and reports for management
Requirements:
- Post-secondary degree in Business, Technology, or related discipline
- Over three years of experience in Cyber Operations
- Security monitoring experience with SIEM and EDR technologies
- Experience in Incident Response or relevant cybersecurity fields
- Robust networking, vulnerability management, and incident management knowledge Bring SOC monitoring, incident response, and security tools expertise to Cyber Defense services supporting the City of Toronto.