Support SOC operations in Toronto by monitoring alerts, escalating incidents, and applying SIEM, EDR, and threat detection expertise. This permanent full time role works Monday to Friday.Reporting to the Manager, Cyber Defense, you will support the Office of the Chief Information Security Officer. The work covers Cyber Defense activities, security tools, incident response, and operational threat intelligence. You will collaborate with IT teams, external partners, and service providers across the City.Key Responsibilities:
Monitor SOC alerts and escalate incidents when neededSupport threat detection and incident response activitiesMaintain SIEM, EDR, NDR, WAAP,
and SOAR toolsApply basic operational and tactical cyber threat intelligencePrepare security metrics and reports for managementRequirements:
Post-secondary degree in Business, Technology, or related disciplineOver three years of experience in Cyber OperationsSecurity monitoring experience with SIEM and EDR technologiesExperience in Incident Response or relevant cybersecurity fieldsStrong networking, vulnerability management, and incident management knowledgeBring SOC monitoring, incident response, and security tools expertise to Cyber Defense services supporting the City of Toronto.
#J-18808-Ljbffr