Security Operations Center (SOC) Analyst – Hybrid, Toronto

About the role

We are looking for a Security Operations Center (SOC) Analyst to join our cyber‑security team in Toronto. This hybrid position (2 days onsite) is the first line of defense, monitoring global infrastructure, triaging incidents and collaborating with cross‑functional teams to protect digital assets.

Key responsibilities

• Continuously monitor security events using industry‑standard SIEM and case‑management tools.
• Analyze data from multiple sources to identify threats, vulnerabilities and malicious patterns.
• Provide recommendations to improve detection capabilities and ensure compliance with standards and regulations.
• Triage and investigate incidents, act as first responder and document findings in detailed case journals.
• Collaborate with incident management, threat intelligence and insider‑threat teams to escalated incidents.
• Create and update procedural documentation and activity reports for security tools.
• Identify automation and process‑efficiency opportunities to enhance security operations.
• Stay current with industry trends through professional associations and continuous learning.

Required profile

• Ability to work independently while building effective relationships with internal and external stakeholders.
• Strong analytical judgment to diagnose and solve security problems.
• Creative thinker who proposes new solutions and shares expertise with the team.
• Excellent verbal and written communication skills.
• Commitment to continuous improvement and staying abreast of technical trends.

Required skills

• Proficiency with SIEM tools for security monitoring and detection.
• Experience using case‑management platforms to track investigations.