Tekstraton is seeking a seasoned Senior Cyber Security & SOC Analyst to join our security operations team in a fully remote capacity across Canada. In this role, you will act as a senior escalation point for security events, drive proactive threat hunting, and help architect advanced detection and response workflows across on-premises and cloud infrastructures.
Key Responsibilities:
- Monitor, analyze, and remediate advanced security events, serving as a Tier 3 escalation resource for critical incidents.
- Perform proactive threat hunting operations leveraging telemetry, threat intelligence, and the MITRE ATT&CK framework.
- Design, build, and optimize SIEM/SOAR detection rules, correlation queries, and automated incident response playbooks.
- Conduct digital forensics, root cause analysis, and post-incident reviews to fortify enterprise defense mechanisms.
- Partner with DevOps and infrastructure teams to identify vulnerabilities, recommend remediation strategies, and validate system hardening.
Qualifications & Requirements:
- 5+ years of progressive hands-on experience in a dedicated SOC, incident response, or cyber defense role.
- Deep expertise with leading SIEM platforms (e.g., Microsoft Sentinel, Splunk) and EDR/XDR tooling (e.g., CrowdStrike, Defender for Endpoint).
- Strong knowledge of modern attack vectors, networking protocols, operating system internals, and cloud security architectures (AWS/Azure).
- Relevant industry certifications such as CISSP, GCIH, GCIA, CISM, or equivalent are strongly preferred.
- Must reside in Canada and be legally authorized to work without sponsorship.