IT Security Consultant

Job summary

Monitor, triage, investigate, and escalate security alerts and incidents as part of a 24/7 SOC, including recommending or performing basic containment actions. Respond to inquiries, prepare reports, tune detection use cases, document procedures, and collaborate with security teams on complex investigations.

Job details

Title : IT Security Consultant Location : Remote in Canada Duration – 12 months Pay Rate – T4 - $52 - $54 / INC - $58 - $62 Description: As a Tier 1 Security Consultant in our SOC, you’ll be the frontline gatekeeper of our security environment, you are ahead of the curve. With your investigative mind you thrive on identifying, assessing, qualifying and escalating events, or security incidents that could potentially impact our complex environment, applications and infrastructures. You aren’t afraid to dive in, communicate your findings and make recommendations in an effective and timely manner. What you’ll do ● As part of the 24x7 Security Operations Center team, you will: ● Be a part of a collaborative and supportive team that is required to work on a 24/7/365 rotating shift schedule ● Utilize your cyber security skills to perform alert monitoring, triage, investigation and escalation ● Perform high quality security investigations, escalations and reports ● Perform or recommend basic incident response containment actions or escalate to when required ● Respond to and action all inquiries, phone calls and service requests received ● Attend meetings and present security monitoring reports ● Make recommendations for use case tuning opportunities ● Document processes and procedures ● Analyze complex problems, collaborate with other security teams ● Strong verbal and written communicator, analytical thinker and lifelong learner ● Act as subject matter expert on all SOC security issues, analyze complicated investigations and present them to the team What you bring 3+ years of experience working in a SOC environment. 2+ years of experience responding to security incidents leveraging the Crowdstrike Falcon platform. Ability to perform security investigations across multiple platforms and technologies. Deep knowledge of the latest attack vectors and threat actor tactics. Working knowledge of SIEM, SOAR, Servers, Firewalls, IDS/IPS, EDR, and AI technologies. Self-motivation and accountability when managing technical projects. A detail-oriented mindset with strong analytical thinking skills. A passion for information security and a drive for continuous learning. Ability to work with limited supervision and manage time effectively. Availability to work rotating shifts and participate in emergency escalation calls. University degree or college diploma in Information Security, Computer Science, Engineering, or a related discipline. Ability to obtain (or currently hold) a Canadian Government Secret Security Clearance. Great-to-haves Professional Cybersecurity certifications (e.g., GCIH, GCDA, Security+). Experience with Google SecOps, or advanced Crowdstrike modules. Familiarity with GCP, Azure Cloud Platforms.

What you’ll do

Monitor, triage, investigate, and escalate security alerts and incidents as part of a 24/7 SOC, including recommending or performing basic containment actions. Respond to inquiries, prepare reports, tune detection use cases, document procedures, and collaborate with security teams on complex investigations.

Requirements

Requires at least 3 years of SOC experience and 2 years responding to security incidents using CrowdStrike Falcon, along with knowledge of security platforms, infrastructure, and current attack techniques. Applicants need a relevant university degree or college diploma, must be available for rotating shifts and emergency escalations, and must be able to obtain or hold Canadian Government Secret Security Clearance.

Listed skills

• Consultant · Preferred
• Teams · Preferred
• Analytical · Preferred
• Escalations · Preferred
• Microsoft Azure · Preferred
• collaborative · Preferred
• Detail-oriented · Preferred
• Google Cloud · Preferred
• Supervision · Preferred
• Technical · Preferred
• Time · Preferred
• Verbal · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Security Operations Center Monitoring
• Security Alert Triage
• Security Investigations
• Incident Response
• CrowdStrike Falcon
• SIEM
• SOAR
• Endpoint Detection and Response
• Threat Analysis
• Incident Escalation
• Security Reporting
• Use Case Tuning
• Firewalls
• IDS/IPS
• Cloud Security
• Security Clearance

Job areas

• Security & Safety
• Technology
• Consulting

More jobs from Experis Canada