Senior SOC Analyst

Job summary

The Senior SOC Analyst serves as the primary escalation point for complex security events, leading investigations, containment, and forensic evidence collection. They also improve SOC operational maturity by developing detection logic, authoring response playbooks, and collaborating with cross-functional teams.

Job details

Mark Anthony Group is one of North America's most successful privately held alcohol beverage companies. We are a leading producer and distributor of fine wine, premium Ready to Drink (RTD) products, and spirits in the Global beverage alcohol industry. We are an innovative and ambitious organization with a successful track record of building successful and disruptive brands, including the iconic Mike’s Hard Lemonade and White Claw. The Senior SOC Analyst serves as the core escalation point for complex security events, leading deep-dive investigations, containment, and forensic evidence collection across hybrid cloud, network, and endpoint environments. Beyond alert triage, this role actively improves SOC operational maturity by authoring response playbooks, engineering new detection logic aligned with frameworks like MITRE ATT&CK, and collaborating with cross-functional IT teams to drive rapid root-cause remediation. This is a hands-on role for a cybersecurity professional with foundational experience in IT security, infrastructure, or a related technology environment. The position is ideal for someone looking to expand their expertise in security operations, incident management, and risk mitigation. In this role, you will monitor, analyze, and investigate security alerts, support the timely resolution of incidents, and help enhance security technologies, controls, documentation, and operational processes. Working closely with the IT Security team and cross-functional technology stakeholders, you will contribute to protecting the confidentiality, integrity, and availability of the organization's systems, networks, and data. The ideal candidate is analytical, detail-oriented, and eager to grow in a collaborative, fast-paced environment while building expertise across a broad range of cybersecurity disciplines. What you'll do: · Review, investigate, and coordinate the response to security alerts and incidents raised by MDR, EDR, SIEM, and related tools. · Monitor and triage security events, escalating critical incidents in accordance with established protocols and response workflows. · Conduct log analysis and threat hunting across endpoint, network, cloud, and identity platforms to identify potential indicators of compromise. · Investigate, document, and report security incidents, maintaining accurate operational logs and incident records for audit and compliance purposes. · Support identity and access management processes, including privileged access reviews, privileged identity management, and secure remote access requests. · Monitor and maintain network security operations, including firewall rule reviews, secure remote access, and wireless security controls. · Contribute to the implementation and ongoing improvement of the organization’s SIEM by onboarding data sources, developing detection use cases, tuning rules, and refining alert quality. · Support security policies, standards, playbooks, procedures, and other operational documentation. · Respond to requests for security assistance and collaborate with IT Operations, Infrastructure, Risk and Compliance, and Security Engineering teams. · Recommend practical enhancements or integrations that improve security tools, processes, alert quality, and incident response effectiveness What you’ll bring: · A minimum of 2-5 years of experience in cybersecurity, infrastructure, a Security Operations Centre, incident response, or related IT role. · Post-secondary education in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. · Working knowledge of Microsoft 365, Windows administration, and core security concepts. · Solid understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and firewalls. · Experience with MDR, EDR, SIEM, vulnerability management, or incident response processes · Familiarity with cybersecurity frameworks and standards such as MITRE ATT&CK, NIST, ISO 27001, or SOC 2. · Strong analytical, problem-solving, prioritization, and decision-making skills, including the ability to work effectively under pressure. · Ability to assess and communicate technical risks in a business context to both technical and non-technical stakeholders. · Self-motivated, organized, and able to manage competing priorities in a fast-paced environment. · Relevant certifications such as Security+, CySA+, or Microsoft or AWS security certifications are considered an asset. Why Join Us? Mark Anthony is committed to hiring, engaging, and growing qualified, talented, and motivated team members at every level of our organization. We offer competitive compensation that recognizes individual and company performance. The typical hiring range for this position is $80,000 - $120,000 annually complemented by a bonus plan; the base pay is determined by market location and job-related knowledge, skills, experience, and education. As part of our Total Rewards program, we are also proud to offer: * Company-matched RRSP contributions * Extended health and dental benefits, and mental health plans with 24/7 access to a primary care physician via Lumino Health * Maternity & Adoption Leave Top Up and Paid Secondary Caregiver Leave * Paid time off * An extensive offering of world leading learning and development programs to empower your career development – in-person and digital offerings with internationally renowned resources like Franklin Covey and Lumina. Other perks include: * Located in a prime Vancouver neighborhood (near transit) * Hybrid work environment of 4-days a week in-office * Company paid parking * Complimentary building gym We are growing a lasting legacy in the beverage alcohol industry, with people first. Apply now! Mark Anthony Group is an equal opportunity employer. We encourage applications from individuals of all backgrounds who are eligible to work in Canada. We thank all candidates for their interest in MAG and we will reach out to those candidates that are under consideration. If you are contacted for an interview and require accommodation during the recruitment process, please contact your recruiter. ________________________________________________________________________ At Mark Anthony, we exist to Unearth the Extraordinary: Our Purpose is not just a statement; it is a call to action that binds us together and ignites our passion for making a difference. It is the driving force behind why we do what we do every single day, connecting our global organization across all business units, roles, and locations. We are: Best in Our Craft We set the standard with a pursuit of excellence that can be found in everything from our products and processes to our plants and people. Ambitiously Curious We stay curious, dreaming big and navigating the unknown with an enduring belief in better. Made With Humility We bring humility, authenticity, fun, and support to every collaboration and celebrate wins as a team. Daringly Disruptive We disrupt the status quo, moving fast to seize opportunities and acting scrappy to stay ahead of industry giants.

What you’ll do

The Senior SOC Analyst serves as the primary escalation point for complex security events, leading investigations, containment, and forensic evidence collection. They also improve SOC operational maturity by developing detection logic, authoring response playbooks, and collaborating with cross-functional teams.

Requirements

Candidates must have 2-5 years of experience in cybersecurity or IT infrastructure and a post-secondary education in a related field. Proficiency in networking fundamentals, security frameworks, and experience with SIEM/EDR tools are required.

Benefits

• Company-matched RRSP contributions • Extended health and dental benefits • Mental health plans • Maternity & Adoption Leave Top Up • Paid Secondary Caregiver Leave • Paid time off • Learning and development programs • Company paid parking • Complimentary building gym

Listed skills

• Microsoft 365 · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Security operations
• Incident response
• Log analysis
• Threat hunting
• SIEM
• EDR
• MDR
• Network security
• Identity and access management
• Vulnerability management
• MITRE ATT&CK
• Firewall management
• Windows administration
• Microsoft 365
• Risk mitigation
• Forensic evidence collection
• Incident Management
• Incident Response
• Operations
• Problem Solving
• Workflow Management
• Prioritization
• Risk Mitigation
• Curiosity
• Decision Making
• Innovation
• Detail Oriented
• Firewall
• Network Security
• Security Policies
• Information Technology
• Auditing
• Computer Science
• Cyber Security
• Vulnerability Management
• Self-Motivation
• Investigation
• Security Information And Event Management (SIEM)
• Triage
• Time Off Management
• Information Technology Operations
• Confidentiality
• Primary Care
• Mental Health
• Caregiving
• TCP/IP
• Virtual Private Networks (VPN)
• CompTIA Security+
• Identity And Access Management
• Humility

Job areas

• Security & Safety
• Technology
• Food & Beverage
• Soc Analyst
• Security Operations Center Analyst
• Database and Network Professionals Not Elsewhere Classified
• Software Quality Assurance Analysts and Testers