← All roles
Example listing SOC & Incident Response
SOC Analyst, Tier 2
About the role
The SOC covers a large Canadian client base around the clock. Tier 2 analysts are the investigation engine: working alerts through to a conclusion, handling confirmed incidents end to end, and tuning the detections that fire too often. Shifts rotate with a published schedule and shift premiums.
What you’ll do
- Investigate and conclude Tier 2 alerts across SIEM and EDR tooling
- Own confirmed incidents through containment and handover, with clear documentation
- Tune noisy detections and propose new ones based on what you see
- Mentor Tier 1 analysts and review their escalations
- Write incident summaries a non-technical client contact can understand
What you bring
- 2+ years in a SOC, including at least a year handling Tier 2 investigations
- Solid SIEM experience (Splunk or Sentinel) and EDR (CrowdStrike, Defender, or similar)
- Working knowledge of Windows and Linux logs, networking fundamentals, and MITRE ATT&CK
- Security+, CySA+, GCIH, or equivalent — or experience that clearly covers it
- Based in Canada, able to work rotating shifts including some weekends
What’s on offer
Base salary of $75,000–$95,000 depending on experience, plus shift premiums, benefits, and a certification budget. Fully remote within Canada. Permanent, full-time.
Questions before you apply? Email hello@403talent.ca or call 403-863-4517 — a person answers, and there’s no obligation either way.