Specialist, Cyber Operations

About the role

Join Air Canada’s Cyber Security Operations Centre (CSOC) as a Specialist in Cyber Operations. You will work in a fast‑paced, innovative environment supporting one of North America’s leading airlines, focusing on advanced monitoring, detection engineering, and incident response.

Key responsibilities

• Manage, maintain, and optimize CSOC technologies such as SIEM, SOAR, and related detection and response platforms.
• Perform Digital Forensics Incident Response (DFIR) and threat‑hunting activities using known TTPs and IOCs.
• Enhance detection capabilities to address evolving cyber threats and act as an escalation point for analysts.
• Create and maintain documentation, including root‑cause analyses, SOPs, and incident‑response procedures.
• Measure, report, and improve service‑level metrics that demonstrate CSOC effectiveness.
• Produce threat‑intelligence reports and collaborate with stakeholders during investigations.
• Develop detection use cases, monitor processes, and support technology integration efforts.

Required profile

• University degree, technical certification, or equivalent experience.
• 5+ years of IT, security operations, or cyber‑security experience in a large enterprise.
• Experience in a 24/7 operational environment with shift work and on‑call support.
• Strong analytical, problem‑solving, and decision‑making abilities.
• Effective communication and collaboration skills with diverse stakeholders.

Required skills

• SIEM and SOAR platforms
• Digital Forensics Incident Response (DFIR)
• Threat hunting using TTPs and IOCs
• Network protocols, packet flow, TCP/UDP traffic
• Firewalls, IPS, proxy, WAF, endpoint detection solutions

What we offer

• Opportunity to work with a leading North American airline.
• Dynamic, innovative environment with cutting‑edge security technologies.
• Professional growth through exposure to advanced cyber‑security operations.