Cyber Security SOC L3 Security Analyst

**Requisition ID**: 48782

**Domain**: Digital and IT/Cybersecurity

**Contract type**: Permanent

**Schedule**:
The Equans Group is a world leader in the energy and services industry. The Group operates in 20 countries and has 90,000 employees on 5 continents.

Equans designs, installs, and delivers customized solutions to improve its customers’ equipment, systems and technical processes and optimize their use in the context of their energy, industrial and digital transitions.

Active in Canada and the United States for more than 30 years, Equans Services is the partner of businesses, industries and institutions that want to move towards more connected buildings, manage their facilities efficiently and decarbonize transportation infrastructure and mobility.

We design, install, and maintain custom solutions to improve our customers’ facilities, systems, and infrastructures.

Our core offerings are focused in the following areas:

- Integrated Asset and Facilities Management
- Operation and maintenance of buildings and equipment
- Energy efficiency solutions and sustainability plan
- Building automation and controls
- Solutions for transportation and mobility

**Summary**

The **L3 SOC ANALYST **is a member of the Equans Security Operations Center (SOC) which is responsible for handling cybersecurity incidents within the Equans information systems.

His/her responsibilities are:

- Take charge of the cybersecurity incidents entrusted to him/her.
- Improve the detection & reaction capability of the EQUANS SOC by:

- Proposing, testing and implementing detection rules ;
- Continually improving remediation playbooks.
- Reducing false positives.
- Propose automation of recurrent process.

**Description**
- Thoroughly investigate referred incidents within GSOC team on Cloud and on-premises environments.
- Train with teammates on a regular basis.
- Analyze and contextualize suspicious behavior for proper understanding.
- Participate in crisis management via EQUANS Technical cyber crisis unit.
- Investigate digital systems and networks, performing log and malware analysis.
- Be able to create reports and visualizations of security attacks.
- Track trends in performance metrics and incident reports.
- Work to decrease false positive alerts and findings.
- Development or proposal of tools to support GSOC activities as well as those of the rest of the team.
- Collaborate to integrate TTPs and indicators of compromise applicable to digital investigations into the detection tools.
- Carry out other duties assigned by management as required
- Formalize expertise for internal and external training.
- Participation in Purple Teams.

**Requirements**:

- One or more qualifications in the field of cyber defense
- At least 2 to 7 years of experience in the field of cybersecurity incident response.
- Comfortable with security equipment and solutions and is familiar with intrusion methods on computer systems and networks.
- Familiar with SOC procedures and workflow tools.
- Cybersecurity certifications are a strong advantage.
- Bachelors’ degree in computer science, information systems, engineering, or an equivalent combination of education and experience required.

**Skills**
- Have a thorough knowledge of the methods and functions of security equipment.
- Participate in the improvement and development of process and procedure documentation.
- Ability to work independently to perform analysis and investigations.
- Possess an information security and operations mindset.
- Demonstrate strong technical knowledge of operating systems, SQL, SIEM, scripting, intrusion detection systems, firewalls, proxies, Radius, VPN gateways
- Keep a personal watch and share it with the security teams.
- Ability to multi-task and prioritize.
- Curious and have good verbal and written communication skills.
- Keep current with emerging cybersecurity tools, services, guidelines, mandates, standards, regulations, trends, alerts, and issues.
- Demonstrate problem-solving, critical thinking, and logical structuring skills.
- Strong communication skills with the ability to engage with system and network administrators, systems users, and managers.
- Ability to act as a team lead if required.
- Strong proficiency in conversational and technical English.
- You have strong ethics and exercise discretion.

**What Equans offers you**
- Group insurance upon your hire;
- A bonus program;
- A pension plan;
- Thirteen (13) statutory holidays;
- Work-life balance;
- We believe in the importance of diversity and inclusion.
- While performing the duties of this job, the employee is not exposed to weather conditions.
- The noise level in the work environment is usually moderate.

**Equal employment opportunity**:
All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status

**Comment**:
Does thi