Security Operations Analyst

**Entity: Cycura Data Protection Corp.**

**Position: Security Operations Analyst**

**Type: Full Time**

**Location: Remote**

**About the Company**:
Cycura is an in-demand team of anti-hackers, who are battle tested with clients across private and public sectors. We have developed a global reputation for leading-edge cyber-security expertise and consultants who pair knowledge of systems and infrastructure with proprietary iterative methodologies that keep hackers at bay.

Since our founding in 2012, we have successfully delivered for top Fortune 500 companies and Federal agencies in Canada. Our continued growth is a result of the talent, passion, and ingenuity of our people. Cycura has established a North American wide footprint.

**Position Summary**:
**What you will be doing**:

- Active involvement in providing 24x7 coverage for the Security Operations Centre
- Monitor and triage security alerts in a timely fashion with the tools provided to analyze and assess security incidents and work with next level support teams as required
- Maintain support documentation of the Cycura knowledge base
- Ensure security use cases related processes and standards are followed
- Complete all duties as assigned by the team lead and managers

**You have**:

- Strong analytical and problem-solving skills
- Excellent written and verbal communication skills
- Comfortable with acquiring information with little to no guidance
- Comfortable handling client expectations, communicating in a clear, professional, and timely manner,
- A demonstrated understanding of fundamental security and network concepts
- Knowledge in cyber threat intelligence models / security frameworks ((e.g., MITRE ATT&CK, Cyber Kill Chain).
- Familiarity with emerging security threats and their attack vectors especially network attacks
- Demonstrated Knowledge/experience in one or more of: Security Information Event Management (SIEM), log management, network architecture, Web Application Firewall (WAF), Intrusion Prevention and Intrusion detection systems (IPS and IDS)
- Demonstrated experience working with one or more of the following query languages: Kusto Query Language, Splunk Search Processing Language, Kibana Query Language, Lucene Query Language, or Structured Query Language
- Experience with rotating shifts and on-call participation
- Experience working with a ticket management system to collect and document information pertinent to security investigations and incidents
- Ability to obtain a Government of Canada security clearance of Level I
- 3-5 years of professional experience in information systems technology
- 3+ years practical experience handling security events or equivalent educational experience
- You possess one or more of the following professional certifications: Security+, CySA+, Microsoft Sentinel Ninja, Microsoft Certified Azure Security Engineer Associate, Elastic Search Engineer.
- Additional Preferred Credentials/ Familiarity: Network+, Sumu Logic, ExtraHop NDR, Cortex XDR, ExaBeam, Python, Powershell, Azure, Entra, Microsoft XDR and other Microsoft Security products.

WELL is committed to supporting a diverse, inclusive, and accessible workplace. We welcome and celebrate the diversity of applicants and team members across ability, race, gender identity, sexual orientation, and perspective. We strive to create an inclusive workplace where differences are celebrated and fuel our success - this is the WELL Way

WELL has been independently certified as a Great Place to Work® by Great Place to Work Institute® Canada, an achievement that reflects the company’s strong commitment to creating a workplace culture centered on trust, inclusivity, and employee well-being, aligning with its ‘Healthy Place to Work’**ESG strategy pillar.