eSentire is looking for highly capable individuals to be part of our Security Operations Centre (SOC). eSentire is a recognized industry leader and one of Canada’s Fastest-Growing Tech company. We work in a collaborative and innovative work environment with brilliant and passionate people who strive and encourage others to do their best. Join us to gain rewarding and developing career experience with the ability to grow and make an impact on your work.
The successful candidate will be able to work in a team who will be responsible for advanced security investigations, driving efficiency and improvements within the SOC department.
Candidate must demonstrate a strong work ethic, willingness and ability to learn, be a self-motivator to execute tasks and have excellent security knowledge. Prior experience in security operations and understanding of eSentire’s offered services.
Core Responsibilities
- Support SOC analysts and other departments with in-depth investigations, digital forensics (network, endpoint, log), and customer requests, conveying results to clients by e-mail and phone as needed.
- Work with customers to improve their security posture and review current configurations
- Train and share your domain of expertise knowledge with other team members
- Discover opportunities for improvements and efficiency of existing processes and solutions
- Lead internal projects and initiatives to increase SOC efficiency and improve SOC tooling, working cross functionally with other internal teams as a stakeholder for the Service Delivery Organization.
- Ability to convey customer requirements to Product and Account Management.
- Represent the SOC in various stages of development of products and services, ensuring internal accountability and visibility.
- Identify gaps in processes and procedures, defining solutions, escalating to appropriate teams, and supporting implementation to promote consistency in service delivery.
- Attend or lead periodic security reviews with customers as required.
- Apply investigative tactics, techniques, and procedures (TTPs), using your understanding of the security threats associated with the incoming signals to guide the creation of Runbooks.
- Deliver training modules and conduct assessments for analysts.
- Keep current with security standards, risks, threats, prevention measures, and best practices
- Analyze, evaluate and report on anomalous behavior and traffic patterns
- Define and document new policies and procedures
Minimum Qualifications
- 3+ years of operational security experience within a Security Operations Centre or similar Cyber Security Analysis role
- College and/or University Degree in Computer Science, Computer Security, or related discipline
- Hands on experience with security solutions such as IDS/IPS Solutions (Suricata, Snort), Sandbox technologies (Hybrid Analysis, Cuckoo), Endpoint products (Carbon Black, Crowdstrike, Microsoft), SIEM platforms (Sumo Logic, Sentinal), etc.
- Strong understanding of the TCP/IP networking, including a deep understanding of IP protocols (HTTP, DNS, SMTP, SMB, etc.)
- Ability to review process information, uncover threats and tell the story of what occurred with respect to a customer environment
- Experienced working in a Linux based environment
Additional Qualifications
- Technical and security certifications such as CISSP, SSCP, CEH, CCNA, GSEC, OSCP, Network+, Security+, ITIL Foundation/Intermediate are considered an asset
- Understanding and prior experience with relational and non-relational databases
- Experience with regular expressions and/or atleast one common scripting language (PERL, Python, Bash, etc.)
We thank all applicants in advance for applying. Only individuals selected for interviews will be contacted.
eSentire is committed to creating a fair work environment that is aligned with the Accessibility for Ontarians with Disabilities Act (AODA). We guarantee equal treatment and provide opportunities regardless of race, creed, color, religion, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, status as a protected veteran or any other legally protected grounds and will not discriminate on these basis. If you have any accessibility requirements during the recruitment process, please reach out to our HR team at aoda@esentire.com and any accommodation needs will be addressed upon request.
Other details
- Job Family Security Internal (Advanced)
- Pay Type
- Excellent understanding of security standards, risks, threats, prevention measures, and best practices
- Ability to identify unknown security threats, trends and anomalies
- Analytical, critical thinking, and problem-solving skills
- Ability to work in a fast-paced environment and be self-motivated
- Strong written and verbal communication and organizational skills
- Ethical and professional, able to proactively support team culture that fosters knowledge sharing, excellence and collaboration
