{bc}
Apply
company_site

Senior Security Analyst | Analyste sénior en sécurité

SITA
Montréal, CAN
Full-time
Senior · 3–5 years experience
Discovered 1 weeks ago
UNAVAILABLE
Free

Job Fit Check

Base Career helps you apply smarter for this job.

?%
Ready to Scan

Key skills for this role

UNAVAILABLE
Smart Apply

Full Job Posting

WHAT YOU WILL DO

  • Act as the primary escalation point for junior SOC Analysts, providing expert guidance and oversight during security investigations.
  • Lead complex security incident investigations, validating alert classification, severity, scope, and escalation decisions.
  • Conduct advanced threat analysis and correlation across SIEM, EDR/XDR, cloud, identity, network, and endpoint environments.
  • Collect, analyze, and document evidence, developing investigation timelines and technical findings to support incident response activities.
  • Collaborate with SIRT and cross-functional technical teams, ensuring timely escalation of confirmed or suspected security incidents.
  • Develop, optimize, and maintain detection rules, correlation logic, SOC use cases, investigation playbooks, and alert tuning activities.
  • Identify detection gaps, monitoring deficiencies, and false-positive trends, applying the MITRE ATT&CK framework to strengthen threat detection and monitoring capabilities.
  • Mentor SOC Analysts through technical coaching, investigation support, quality reviews, and adherence to SOC standards.
  • Provide part-time support to the Vulnerability Management (VM) function, including vulnerability validation, risk prioritization, remediation support, and coordination with relevant stakeholders.
  • Produce technical reports, security assessments, operational metrics, and stakeholder briefings, while supporting tabletop exercises, post-incident reviews, and continuous improvement initiatives to enhance SOC processes, operational efficiency, and service quality..
  • ABOUT YOUR SKILLS
  • Advanced experience investigating and responding to security events using SIEM and EDR/XDR platforms.
  • Strong understanding of the incident investigation, triage, and escalation lifecycle within enterprise environments.
  • Expertise in analyzing and correlating logs from endpoints, cloud services, identity platforms, networks, firewalls, proxies, VPNs, and applications.
  • Proven ability to develop, tune, and optimize detection rules, correlation logic, and SOC use cases to improve threat detection.
  • Proficiency with security query languages such as KQL, Lucene, EQL, and Sigma, with scripting experience in PowerShell and/or Python.
  • Strong technical knowledge of Windows, Linux, Active Directory, Microsoft 365, Azure/AWS, networking, and common cyberattack techniques.
  • Deep understanding of the MITRE ATT&CK framework and its application to security monitoring, threat detection, and incident investigations.
  • Excellent analytical, communication, mentoring, and documentation skills, with a proactive mindset and commitment to continuous learning.
  • Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related discipline, with 3–5 years of experience in a SOC L2 Analyst or equivalent Security Operations role.
  • Industry-recognized cybersecurity certification such as SC-200, GCIH, GCIA, CySA+, ECIH, or a related credential demonstrating expertise in security operations and incident response.
  • WHAT WE OFFER
  • We’re all about diversity. We operate in 200 countries and speak 60 different languages and cultures. We’re really proud of our inclusive environment. Our offices are comfortable and fun places to work, and we make sure you get to work from home too. Find out what it's like to join our team and take a step closer to your best life ever.
  • 🏡 Flex Week: Work from home up to 2 days/week (depending on your team’s needs) ⏰ Flex Day: Make your workday suit your life and plans 🌎 Flex Location: Take up to 30 days a year to work from any location in the world 🌿 Employee Wellbeing: Access our 24/7 EAP and Champion Health platform for all-around wellbeing 🚀 Professional Development: Build your skills with LinkedIn Learning and internal training programs 🙌🏽 Competitive Benefits: Designed to suit your country and contract type
  • Equal Employment Opportunity Employer / Veterans / Disabled. SITA is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard of race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability.
  • UNAVAILABLE

Qualifications

  • ABOUT YOUR SKILLS - Advanced experience investigating and responding to security events using SIEM and EDR/XDR platforms. - Strong understanding of the incident investigation, triage, and escalation lifecycle within enterprise environments. - Expertise in analyzing and correlating logs from endpoints, cloud services, identity platforms, networks, firewalls, proxies, VPNs, and applications. - Proven ability to develop, tune, and optimize detection rules, correlation logic, and SOC use cases to improve threat detection. - Proficiency with security query languages such as KQL, Lucene, EQL, and Sigma, with scripting experience in PowerShell and/or Python. - Strong technical knowledge of Windows, Linux, Active Directory, Microsoft 365, Azure/AWS, networking, and common cyberattack techniques. - Deep understanding of the MITRE ATT&CK framework and its application to security monitoring, threat detection, and incident investigations. - Excellent analytical, communication, mentoring, and documentation skills, with a proactive mindset and commitment to continuous learning. - Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related discipline, with 3–5 years of experience in a SOC L2 Analyst or equivalent Security Operations role. - Industry-recognized cybersecurity certification such as SC-200, GCIH, GCIA, CySA+, ECIH, or a related credential demonstrating expertise in security operations and incident response. WHAT WE OFFER We’re all about diversity. We operate in 200 countrie

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at SITA

Senior Analyst, Incident Management

, IND

Discovered TodayFull-time

Specialist Customer Support

Gurugram, IND

Discovered TodayFull-time

Solution Engineer, Manager

Sydney, AUS

Discovered TodayFull-time

Specialist Customer Support

, IND

Discovered TodayFull-time

Business Development Manager

, KSA

Discovered Today

Solution Engineer, Manager

Sydney, AUS

Discovered TodayFull-time

Senior Service Operations Specialist (Windows | Linux | Application , OS & Infrastructure Support)

, IND

Discovered YesterdayFull-time

Specialist Service Operations (Windows | Linux | Application , OS & Infrastructure Support)

Delhi, IND

Discovered YesterdayFull-time