ISEMC (SOC) Analyst

The ISEM Centre Analyst reports to the Director of Security Event Management and will work under the Manager of Security Event Management for the iSEM Centre. 

The Information Security Event Management Centre (iSEM Centre) team reports to the Global Chief Information Security Officer and provides cyber detection, incident response and threat intelligence services on behalf of the Global Enterprise.

What you will do:

• Monitor, detect, and analyze potential intrusions in real time and through advanced analytics of security-relevant data sources
• Respond to confirmed incidents, by coordinating resources and directing remediation efforts
• Provide situational awareness and reporting on cybersecurity status, incidents, and KPIs to business units
• Ensure operating security technologies such as IDS/IPS and data collection/ analysis systems are configured and operating effectively 
• Monitor multiple sources of security event information to identify suspicious activity and provide triage, initial investigation and documentation of potential incidents.
• Security reporting, analyzing threat intelligence and attending Critical Incident Response Team (CIRT) meetings.  The ISEM Centre Analyst reports to the Director of Security Event Management and will work under the Manager of Security Event Management for the iSEM Centre.
  
  
  

What you will bring:

• Certificate or degree from an accredited college or university or equivalent experience
• Minimum of four years experience as an Information Technology practitioner or in another I.S. related function
• Experience using trouble ticketing systems (e.g. BMC Remedy, ServiceNow)
• Knowledge of network protocols (e.g., IPv4/IPv6/TCP/UDP/DNS/HTTP)
• Knowledge of major operating systems (e.g., Windows, AIX, Linux)
• Knowledge of security technologies (e.g., SIEM, IDS/IPS, EDR, Firewalls)
• Ability to read and interpret network diagrams and packet captures
• Experience in doing triage, investigation and remediation of security events received via tools such as SIEM, IPS, IDS, EDR, etc
• Demonstrated teamwork skills
• Demonstrated ability to set goals and deliver results
• Ability to multi-task
• Ability to effectively manage change and stress
• Excellent verbal and written communicator
• Highly motivated and detailed oriented
• Self managed and team oriented
• Strong customer service orientation
• Two or more years of direct experience in Information Security, including some of: threat management, vulnerability assessment, monitoring and investigations
• Experience as a SOC analyst
• Experience with SIEM products
• Experience with scripting and coding (e.g. Python, Power Shell, Perl, VBA)
• Experience with problem/incident and change management response
• Familiar with ITIL processes
• Experience with writing or developing procedures and processes
• Completed, working towards or willing to attain Information Security Certifications (e.g. CISSP, Network +, Security +, SANS GCIA and GCIH)
• Reliability Status security clearance - this is a personnel security status that is required before an employee can gain access to Protected B information, assets or work sites as outlined by the Government of Canada website