RemoteLeaf Logo
Log in Sign up

Security Operations Analyst II

3 weeks, 4 days ago
Canada
Mid Level
Security Analyst
Cybersecurity
AWS DNS GCP SIEM TCP/IP TLS
Apply Now
Alphasense

Alphasense

Alphasense is a global leader in providing high-quality gas sensors and air quality monitors to industrial OEMs. With over 25 years of experience, the company offers a wide range of innovative gas sensor technologies for various applications, including...

Industrial Conglomerates
51-250
Founded 1996
View All Jobs 71

Description

  • Monitor and triage alerts across endpoint, network, cloud, runtime, and identity data sources.
  • Perform structured investigations on escalated or ambiguous alerts and build clear event timelines.
  • Classify alerts as true positive, false positive, or benign with documented rationale.
  • Identify incident scope and blast radius before escalation or containment.
  • Escalate cases with complete investigation packages including context, evidence, timelines, and hypotheses.
  • Support active incident response through evidence collection, log pulls, and timeline reconstruction.
  • Execute containment actions such as endpoint isolation, account suspension, and token revocation as directed.
  • Maintain accurate case documentation, shift handoffs, and incident status updates.
  • Monitor cloud audit logs and identity provider events for suspicious activity and access anomalies.
  • Flag false positives, detection gaps, and outdated runbook steps to improve security operations quality.

Requirements

  • 2–4+ years of hands-on experience in a SOC or security operations role with direct alert triage responsibility.
  • Strong understanding of the MITRE ATT&CK framework.
  • Working knowledge of EDR tooling, including process tree analysis and endpoint artifact interpretation.
  • Familiarity with SIEM-based investigations, including querying logs and building timelines.
  • Understanding of foundational network protocols such as TCP/IP, DNS, HTTP/S, and TLS.
  • Exposure to cloud security monitoring such as AWS or GCP, including audit log review and IAM-related investigations.
  • Experience investigating identity-based alerts in an enterprise identity provider such as Okta or Entra ID.
  • Strong written communication and case documentation skills.
  • Experience with next-gen EDR platforms such as CrowdStrike Falcon or SentinelOne is preferred.
  • Hands-on SIEM experience with a cloud-native platform such as Google SecOps/Chronicle or Microsoft Sentinel is preferred.
  • Exposure to CSPM or cloud security tooling such as Wiz or Prisma Cloud is preferred.
  • Familiarity with AWS IR fundamentals, including CloudTrail, GuardDuty, VPC Flow Logs, and IAM chain analysis is preferred.
  • Understanding of encoding, encryption, and hashing is preferred.
  • Experience working with or receiving escalations from an MDR partner is preferred.
  • Relevant certifications such as CompTIA CySA+, Security+, BTL1, or GCIH are preferred.

Benefits

  • Fully remote role within Canada.
  • Must be able to work in the Pacific time zone.
  • Opportunity to work with a mature security toolset and experienced colleagues.
  • Equal-opportunity employer commitment.
  • Reasonable accommodation for qualified employees with protected disabilities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Monzo

Senior Security Analyst

Monzo 1K-5K Banks

Monzo is hiring a Senior Security Analyst to help its growing UK digital bank manage security risk across suppliers, audits, products, technology changes, and regulatory requirements.

United Kingdom Full-time Senior Security Analyst
$72k-$89k
Cybersecurity Penetration Testing
2 hours, 24 minutes ago
Rush Street Interactive

SOC Analyst

Rush Street Interactive 251-1K Hotels, Restaurants & Leisure

Rush Street Interactive is seeking a SOC Analyst to protect its online gaming information systems by monitoring security activity, investigating threats, responding to incidents, and supporting vulnerability management.

Colombia Full-time Junior Security Analyst
Cybersecurity
2 hours, 54 minutes ago
Rush Street Interactive

SOC Analyst

Rush Street Interactive 251-1K Hotels, Restaurants & Leisure

Rush Street Interactive is hiring a SOC Analyst to protect its online gaming information systems by monitoring security activity, investigating threats, responding to incidents, and supporting vulnerability management.

Canada Full-time Junior Security Analyst
$56k-$71k
Cybersecurity SIEM
3 hours, 9 minutes ago
BHG Financial

Identity Access Management Analyst

BHG Financial 1K-5K Diversified Financial Services

BHG Financial is seeking an Identity and Access Management professional to strengthen access controls, protect sensitive data, and support IAM operations across enterprise and cloud systems.

United States Full-time Junior Security Analyst
Active Directory Azure Cybersecurity
3 hours, 24 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers