Cyber Security Analyst I

About the role

We are looking for a Cyber Security Analyst I to join Bell’s Defence Centre, a 24/7 Security Operations Centre that monitors, detects and responds to cyber incidents across our network and infrastructure. The role works in rotating shifts to provide continuous protection of critical systems and data.

Key responsibilities

• Monitor security logs, system events and network traffic to spot suspicious activity.
• Use SIEM and other detection tools to correlate events and identify threats.
• Review, triage and prioritize security alerts based on severity and impact.
• Escalate high‑risk or complex incidents to L2/L3 teams with full context.
• Conduct initial investigations, including log analysis and validation of indicators of compromise.
• Filter false positives according to defined processes.
• Follow established playbooks and SOPs for incident handling and document findings.
• Prepare concise incident reports and maintain audit‑ready documentation.
• Contribute to improving detection rules, workflows and playbooks.

Required profile

• Strong understanding of Windows and Linux operating systems.
• Solid knowledge of networking fundamentals such as TCP/IP, DNS and HTTP.
• Experience analyzing system logs, security events and network traffic.
• Familiarity with SIEM or similar monitoring/detection platforms.
• Basic scripting ability in Python or PowerShell.
• Understanding of common cyber threats, vulnerabilities and incident response fundamentals.

Required skills

• Windows
• Linux
• TCP/IP
• DNS
• HTTP
• SIEM
• Python
• PowerShell