Tekstraton is seeking an experienced and analytical Senior Cyber Security & SOC Analyst to join our team in a hybrid capacity based in Ottawa, ON. In this critical defensive role, you will act as a key escalation lead for advanced security incidents, drive proactive threat hunting operations, and harden our enterprise infrastructure against modern cyber adversaries.
Key Responsibilities:
- Lead Tier 2/3 incident triage, containment, and eradication workflows across cloud, hybrid, and on-premises enterprise environments.
- Design, execute, and document hypothesis-driven threat hunting exercises aligned with the MITRE ATT&CK framework.
- Develop, tune, and optimize detection engineering rules and automated SOAR playbooks to mitigate alert fatigue and accelerate MTTR.
- Perform deep-dive digital forensics and artifact analysis, including memory, disk, and network traffic examinations.
- Mentor junior analysts, contribute to continuous SOC maturity initiatives, and conduct technical post-incident debriefs with executive stakeholders.
Requirements:
- 5+ years of hands-on experience in a fast-paced Security Operations Center (SOC) or dedicated Incident Response team.
- Demonstrated mastery of enterprise SIEM/SOAR platforms (such as Microsoft Sentinel or Splunk) and leading EDR/XDR suites (such as CrowdStrike Falcon).
- Proficiency in scripting with Python, PowerShell, or Bash to automate investigative workflows and threat data parsing.
- In-depth understanding of enterprise networking protocols, OS internals (Windows and Linux), and common adversary TTPs.
- Industry certifications such as CISSP, GCIH, GCFA, or CySA+ are strongly preferred; eligibility to obtain Government of Canada security clearance is required.