SOC Analyst - Tier 1

remote
Toronto, Ontario, Canada .
full-time . October 28, 2024

Description

Role Description

We are seeking a dedicated Tier 1 Security Analyst to join our Risk Operations Center (ROC) team. The ideal candidate brings a solid foundation in cybersecurity, experience in incident response, and a passion for staying ahead of evolving threats. This role requires rotating shifts, covering days, evenings, weekends, and may involve on-call support.

As a first responder to security events, you’ll perform triage and analysis on potential threats and attacks. With experience in IT, SOCs, or equivalent education, you’re ready to take the next step in your cybersecurity career, solving technical issues for our clients. Self-motivated and a natural problem-solver, you’re interested in cyber threat research, security architecture, and/or incident response.

Our hope at Lyrical is that as you grow in your career, you grow with us. We offer training and development opportunities for our SOC Analysts in the area of your choosing. Whether your long-term goals are to work as part of a red team, in digital forensics, or to lead up information security as a CISO, we want to get you there.

This role reports directly to our Risk Operations Centre (ROC) Manager.

Responsibilities

Perform Security Event/Threat Monitoring as part of a 24x7x365 Risk Operations Centre
Support 24/7 operations by working flexible rotating shifts, including weekends, evenings, and occasional on-call duties.
Day to day triaging of alerts, analysis, and escalating when required
Consolidation of data to provide necessary context for escalation to tier II where necessary
Aid in incident response for the Risk Operations Center, helping out with technical investigations of security incidents and providing customers security expertise
Participate in cyber threat research and analysis to improve SIEM and EDR platform visibility and development.
Engage in proactive Threat Hunting during periods without known indicators of compromise.
Contribute to the evaluation of new or updated security solutions in collaboration with engineering.

Qualifications

1-3 years of technical operations experience in Information Security, System Administration, or Network Engineering
Hands-on experience with diverse security technologies, including OS administration (Windows, Linux), Windows Active Directory and Group Policies, basic programming (e.g., Python, PowerShell), and SIEM platforms.
Familiar with network fundamentals (OSI stack, TCP/IP, DNS, HTTP, SMTP), cloud platforms (AWS, Google Cloud, Azure), and log analysis across Windows, Linux, cloud, and endpoint security controls.
Understanding of Endpoint Protection, EDR, firewalls, VPNs, IDS/IPS, web application firewalls, and host-based intrusion detection.
Preferred knowledge includes adversary/pen testing tools, LOLBIN identification, and the MITRE ATT&CK framework for analyzing threat tactics and techniques.
Experience in incident response and a working knowledge of IT Service Management disciplines and their application to security operations.
College Diploma or BS in Computer Science, Engineering, related discipline, or equivalent experience
Preferred Certifications: Security+, GISF, GSEC, GCIA, CISSP, GSEC, CSA, OSCP or other industry standard certifications in information security
Excellent written and verbal communication in English is essential to support client and internal interactions
Applicants must reside in and be legally authorized to work in Canada.
Applicants should be comfortable with working rotating shifts as required

What we offer:

Paid Time Off: Benefit from a comprehensive package offering generous vacation days, sick leave, personal days, and designated time off for statutory holidays.

Healthcare Coverage: Medical, dental, and extended health services for you and your family at no cost.

Flexible Health Spending: Tailor your healthcare with a flexible Health Spending Account.

Fully Remote: Work from the comfort of your home with our fully remote setup.

Connectivity Stipend: Receive a stipend for phone and Wi-Fi expenses to stay seamlessly connected.

About Lyrical Security:

Lyrical Security is a fast-growing Cybersecurity and Risk Management Services company, based in Markham, Ontario with employees located across Canada in a fully remote operating model.

Lyrical brings enterprise solutions to companies of all sizes across North America, helping our customers to protect their most critical assets with resilient cyber security and risk management technology and services. We dig deeper to understand our customer’s needs and tailor solutions to detect, respond, and prevent security incidents ahead of the threat while maintaining compliance with best practices. Customers across North America trust our Managed, Advisory, Professional, and Offensive Security Services to protect their businesses all day, every day.

For more information about us, visit Lyrical's website at www.lyricalsecurity.com

We encourage people from underrepresented groups to apply. In keeping with our values, no employee or applicant will face discrimination/harassment based on race, color, ancestry, national origin, religion, age, gender, marital domestic partner status, sexual orientation, gender identity, disability status, or veteran status. Lyrical Security also strives to prevent other, subtler forms of inappropriate behavior from ever gaining a foothold in our organization. Whether blatant or hidden, barriers to success have no place at Lyrical Security.

Compensation

$70,000.00 - $80,000.00 per year

Know someone who would be a perfect fit? Let them know!