Job description

Key Result Areas: 

1. Under the leadership of the Manager, Cyber Defense & NOC, the CDC Analyst will ensure delivery of the highest level of service in the support of conducting security event monitoring and analysis as well as incident response.
2. Analyse security event logs and alerts to determine validity, priority, and impact against both security threat best practices and corporate policies. 
3. Perform operational ‘eyes on glass’ real-time monitoring and analysis of security events from multiple sources including but not limited to events from SIEM monitoring tools, network and host-based intrusion detection systems, firewall logs, system logs (Unix & Windows). 
4. Address identified and confirmed security events in a timely manner and provide actionable recommendations for the business to conduct in response. 
5. Contribute to the development and organization of Cyber Security and Data Protection program management, threat intelligence, Defense monitoring and vulnerability management. 
6. Manage and maintain the creation, tracking, actioning, and proper closure of alert tickets and reported events to the SOC. 
7. Maintain up-to-date detailed knowledge of the IT/OT security industry including awareness of new or revised security solutions, improved security processes, new attacks, and threat vectors.
8. Documenting security investigations through standard procedures

Assist with tuning SIEM rules and creating custom log source integration with parsing

Communications and Working Relationships: 

Internal

• Communicates regularly and aligns actions with all ITD technical groups to ensure that all systems and networks are operated securely.  

  
  

• Liaises with other relevant stakeholders within I&DT sections and – if needed - with business units, to identify and validate attempts at intrusion or compromise, and provides high quality investigation and response actions.  

  
  

External

Acts as a focal point for all security related incidents and liaises in with CDC Shift Lead.

Knowledge Skills and Experience: 

• Bachelor’s degree in IT or Computer Security or comparable years’ experience. 

  
  

• Must have at least one of the following certifications:
   Any Sans security certifications preferred, Security+, or CEH.

  
  

• 3+ years of experience in a SOC or security-related role.

  
  

• Experience and extensive knowledge of SIEM, EDR, Email Security & Event log analysis.

  
  

• High understanding of processes related to threat correlation and mitigation.

  
  

• Deep understanding of cybersecurity principles, technologies, and best practices, as well as knowledge of industry standards and frameworks (e.g., NIST Cybersecurity Framework, MITRE ATT&CK framework). 

  
  

• Dedicated and self-driven desire to research and learn more about the information security landscape and incident response.

  
  

• Strong troubleshooting, reasoning, and problem-solving skills.

  
  

Excellent communication and teamwork abilities.