Serve as a trusted escalation point for complex security events, providing technical guidance, mentorship, and support to fellow analysts

Monitor, investigate, and respond to security incidents, suspicious activity, and operational alerts across client environments

Analyze and triage security events using SIEM and monitoring platforms, escalating incidents as required

Act as the first line of defense within the ITOC, monitoring network, infrastructure, and security alerts and coordinating incident response

Manage incidents, investigations, and service requests through established case management and ITSM processes

 Conduct threat analysis, log reviews, and containment activities to support effective incident response

Support access management processes, including privileged access management solutions such as CyberArk

Perform vulnerability scanning activities, review findings, and remediate or escalate identified risks

Execute approved infrastructure changes, patching activities, and scheduled maintenance within designated change windows

Manage and monitor backup operations to ensure the availability and recoverability of client environments

Assist with operational escalations, service disruptions, and client-impacting events to support service continuity

Maintain and enhance internally developed tools and applications that support SOC and ITOC operations

4+ years of experience working in a Security Operations Centre (SOC), Network Operations Centre (NOC), or similar IT operations environment supporting on-premise and cloud-connected technologies

Experience working with SIEM, security monitoring, vulnerability management, and IT service management platforms

Experience working with and managing incidents, problems, changes and service requests that follow ITIL framework standards

Strong understanding of cybersecurity principles, threats, vulnerabilities, and incident response processes

Experience provisioning new client services and working through customer onboarding tasks

Experience with first-level server technologies (i.e. remoting into servers, implementing patches)

Proven ability to troubleshoot and resolve technical and procedural issues across security, infrastructure, and network domains

Ability to be on-site at a NE Calgary location

Availability to work varying schedules of 4 days on, 3 days off ( with every 4-weeks rotation), for 10-hour work shifts with rotation of days, evenings and overnights