Tekstraton is seeking an experienced and analytical Senior Cyber Security & SOC Analyst to join our security operations team based out of Montreal, QC on a hybrid basis. In this role, you will act as a frontline defender and technical escalation point, driving proactive threat hunting, incident response lifecycle management, and the continuous enhancement of our detection and response posture across hybrid-cloud environments.
Key Responsibilities:
- Lead end-to-end triage, containment, eradication, and forensic investigations for high-severity security incidents.
- Design, build, and optimize SIEM detection rules and correlation queries aligned with the MITRE ATT&CK matrix.
- Execute hypothesis-driven threat hunting initiatives across endpoints, cloud infrastructure, and enterprise networks.
- Author and maintain automated SOAR playbooks to accelerate incident triage and response workflows.
- Act as a senior escalation point and mentor for Tier 1 and Tier 2 analysts, fostering operational excellence and knowledge sharing.
Qualifications & Requirements:
- 5+ years of progressive experience in a dedicated SOC or Cyber Incident Response Team (CIRT) environment.
- Deep hands-on expertise with enterprise SIEM/EDR platforms (such as Microsoft Sentinel, Splunk, CrowdStrike, or Defender for Endpoint).
- Strong knowledge of TCP/IP networking, log analysis, malware analysis techniques, and cloud security architectures.
- Industry-recognized security certifications (e.g., CISSP, GCIH, GCIA, GCFA, or CEH) are strongly preferred.
- Professional fluency in English is required; bilingual proficiency in French is considered a strong asset for our Montreal office.