CSIRT Security Analyst Level 2 (Hybrid, Montreal)

About the role

The Level II Cybersecurity Analyst works in a 24 × 7 Security Operations Center, monitoring and responding to threats against critical systems. Based in Montreal with a hybrid work model, the analyst helps protect the firm’s infrastructure and supports the implementation of security strategies.

Key responsibilities

• Monitor security events, health alerts and information requests using SIEM, IDS/IPS, ELK and other tools.
• Validate and assess potential incidents, following standard procedures.
• Escalate issues to senior team members and apply appropriate counter‑measures.
• Document incidents accurately in the case‑management system.
• Contribute to process improvements, tune false positives and suggest tool or script updates.
• Participate in peer reviews and collaborate on incident handling.
• Provide status updates and metrics for the SOC.
• Support shift work to ensure 24 / 7 coverage.

Required profile

• 1‑2 years of hands‑on experience with security monitoring technologies.
• Familiarity with incident response, log analysis and packet capture.
• Ability to work in a fast‑paced, 24 / 7 environment and follow internal security policies.
• Strong analytical mindset and willingness to continuously learn.

Required skills

• SIEM platforms
• IDS/IPS solutions
• ELK stack
• Firewalls and data‑protection tools
• Antivirus solutions
• Endpoint Detection & Response (EDR)
• Content‑filtering solutions
• Incident response procedures
• Log analysis
• Packet capture (PCAP) analysis