SOC Analyst (Night Shift)

Job summary

The SOC Analyst will serve as a first responder to security incidents, monitoring alerts and investigating threats to protect the organization's digital assets. They will also document findings, participate in shift handovers, and collaborate with security teams to improve detection capabilities.

Job details

Why Work Here? At ATCO, your cybersecurity expertise will help protect the systems and services that keep our businesses and communities connected. In this overnight role, you’ll provide critical continuity for ATCO’s security operations, helping the organization remain responsive and resilient around the clock. You’ll be part of a collaborative security community grounded in caring, integrity, agility, and collaboration. With opportunities to strengthen your technical capabilities, share knowledge, and improve detection and response practices, you’ll contribute directly to a resilient, forward-looking security program while growing your career across ATCO's diverse businesses. About the Role: As a Security Operations Centre (SOC) Analyst - Nights, you will serve as a first responder to security incidents and are integral in preventing, detecting, and responding to cyber threats and attacks on ATCO’s network and systems. Working independently overnight, you will collaborate with ATCO security teams and business units to protect the confidentiality, integrity, and availability of the organization’s digital assets and services. You will also document findings and actions and provide clear shift handovers, ensuring emerging threats receive continuous attention. What You Get to Do: • Continuously monitor security alerts and events from various sources such as SIEM (Security Information and Event Management) systems, IDS/IPS (Intrusion Detection/Prevention Systems), firewalls, Endpoint Protection and other security tools • Investigate and respond to security incidents, including malware infections, phishing attacks, and unauthorized access attempts • Analyze and assess potential threats, vulnerabilities, and risks to the organization's information systems • Conduct threat hunts during incidents to search for signs of malicious activity or potential threats within the network • Participate in shift handovers to ensure continuity of monitoring efforts • Recommend rule and detection improvements to reduce false positives and strengthen threat-detection capabilities. • Provide feedback on quality of log events and identify potential gaps in existing logging • Document and report security incidents, findings, and actions taken to relevant stakeholders • Work closely with other ATCO security teams and business units to ensure a coordinated response to security incidents and to improve overall security posture. • Participate in post-incident reviews and contribute to the development and implementation of security policies, procedures, and best practices • Share knowledge, exchange lessons learned, and support continuous learning across the SOC What You Bring: • Post-secondary education in Cybersecurity, Information Technology, or related field • 3+ years cybersecurity experience in a Security Operations Centre (SOC) or similar security monitoring environment • Knowledge of common attack techniques, tactics, and vectors, including phishing, distributed denial-of-service attacks, and malware, with familiarity with frameworks such as MITRE ATT&CK • Experience investigating and assessing attack activity within a security monitoring environment • Solid understanding of networking, operating systems (Linux/Windows), and security principles • Experience with incident detection, escalation, and response • Proficiency with SIEM tools (e.g., Splunk, ArcSight, Sentinel, or similar platforms) • Familiarity with firewalls, intrusion detection and prevention systems (IDS/IPS), endpoint protection, and related security technologies • Sound analytical judgment and close attention to detail when assessing security events and incidents • Clear written and verbal communication skills, including experience explaining technical issues and incident findings to technical and non-technical stakeholders • Experience preparing clear, accurate incident records that document findings, decisions, and response actions. • Independent judgment, effective prioritization, and composure in high-pressure situations • Ability to work scheduled night shifts in a 24/7 environment, including weekends and holidays • Previous experience working night shifts or operating independently is an asset. What We Offer: • A culture based on caring, integrity, agility, collaboration, and striving for excellence • Competitive compensation • Flex benefits • Tuition assistance program • Training and mentorship programs • Charitable donation matching We would like to thank everyone for their application; however, only those being considered for an interview will be contacted. ATCO delivers inspired solutions for a better world. We are a diversified global corporation with investments in the essential services of Structures & Logistics, Utilities, Energy Infrastructure, Retail Energy, Transportation and Commercial Real Estate. Learn more about how we build communities, energize industries and deliver customer-focused solutions like no other company in the world at www.atco.com. ATCO is proud to be an equal opportunity employer. Visit our website for more information. In the spirit of reconciliation, we acknowledge the traditional territories and homelands on which many of our ATCO operations and facilities are located. We honour and respect the diverse history, languages, ceremonies, and culture of the Indigenous Peoples who call these areas home.

What you’ll do

The SOC Analyst will serve as a first responder to security incidents, monitoring alerts and investigating threats to protect the organization's digital assets. They will also document findings, participate in shift handovers, and collaborate with security teams to improve detection capabilities.

Requirements

Candidates must have post-secondary education in Cybersecurity or a related field and at least 3 years of experience in a SOC environment. Proficiency with SIEM tools, networking, and security frameworks like MITRE ATT&CK is required, along with the ability to work night shifts.

Benefits

• Flex benefits
• Tuition assistance program
• Training and mentorship programs
• Charitable donation matching

Listed skills

• Windows · Preferred
• Linux · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity
• SIEM
• Incident response
• Threat hunting
• Network security
• Firewalls
• IDS/IPS
• Endpoint protection
• Malware analysis
• Phishing detection
• Linux
• Windows
• MITRE ATT&CK
• Log analysis
• Vulnerability assessment
• Security operations
• Commercial Real Estate
• Security Tools
• MITRE ATT&CK Framework
• Continuous Development
• Composure
• Technical Issues
• Cyber Threat Intelligence
• OpenText Enterprise Security Manager (ArcSight)
• Endpoint Security
• Threat Detection
• Resilience
• Distributed Denial-Of-Service (DDoS) Attacks
• Reconciliation
• Customer Service
• Information Systems
• Information Technology
• Confidentiality
• Cyber Security
• Operating Systems
• Digital Assets
• Firewall
• Intrusion Detection And Prevention
• Mentorship
• Operations
• Phishing
• Security Policies
• Security Information And Event Management (SIEM)
• Verbal Communication Skills
• Prioritization
• Detail Oriented
• Splunk

Job areas

• Security & Safety
• Technology
• Energy
• Software
• Soc Analyst
• Security Operations Center Analyst
• Database and Network Professionals Not Elsewhere Classified
• Software Quality Assurance Analysts and Testers

More jobs from ATCO