Partially Remote

Barrie, Ontario, Canada

Full time

R-70870

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive workplace where your well‑being is prioritized and your potential can thrive.

The Role

The security delivery support clients in managing their Security Operations and protecting their environments to mitigate security risks (e.g., insider and external threats, intentional and accidental). Position is for an experienced security professional with demonstrated experience within Security Operations, Threat Detection & Response, Security Intelligence, CSM (Continuous Security Monitoring) and NSM (Network Security Monitoring) within the SOC operations environment.

- Lead complex investigations and conduct deep analysis of security events focused on rapid containment, remediation, and mitigation.
- Lead in the detection, triage, analysis and response to cyber-attacks. Serve as a technical Cyber SME and onsite task lead.
- Provide insight and expertise to examine malicious code (malware), attack vectors, network communication methods, analyze threats against target systems and networks, determine target network capabilities and vulnerabilities.
- Training and mentoring Level 1 & Level 2 peers to improve SOC Analyst capability.
- Engaging across the organization and partnership with a diverse set of IT and business stakeholders,



awareness of business needs for delivery and agility and to ensure security topics (operations, engineering, risk, compliance) are integrated and automated properly.
- Working with Cybersecurity, Information Technology Services teams, and others across the global business organization on practical implementation of SOAR and SOC Runbooks and Playbooks
- Identifying, monitoring, and reporting on trackable metrics to improve processes, procedures, and overall operational security while minimizing business impact
- Perform Security Operations maturity assessments, formulate roadmaps to bridge existing security gaps and help accelerate transformation towards SOC maturity.
- Reviewing SOC Runbooks and Playbooks and determining if good practices are being followed, considering most common cybersecurity threats within clients’ industries, business and Geo locations.
- Reviewing SOAR and XDR products utilized and determining if they are configured properly.
- Deploying SOC automation technology through SOAR, Case Management.
- Reviewing Security Operations Runbooks and Playbooks through assessing SOC threat landscape; existing automations and providing recommendations to comply with SOC automation best practices, using applicable cybersecurity framework.
- A willingness to go beyond the ordinary to meet and exceed client expectations.

Your future at Kyndryl





Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won’t find anywhere else, including hands‑on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer‑focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Technical and Professional Experience

- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or other related fields, from an accredited university. Equivalent professional experience can be used in lieu of a degree.
- 8+ years of security analyst experience, preferably in a managed services environment.
- A minimum of 5 years “hands‑on” experience on SOC operations (Standard Operations Procedures, Runbook and Playbooks).
- Experience threat hunting, proactively and iteratively searching to detect advanced threats that evade existing security solutions.
- Expertise in network, host, and cloud‑based security, attack techniques, analysis, and investigation
- Strong experience with Operating systems (Windows, Linux and MacOS) & IT Architecture
- Deep understanding of a variety of logs coming from cloud, network or endpoint

📌 SOCExpert (Barrie)
🏢 Kyndryl
📍 Barrie