Cybersecurity Analyst

AlphaKOR•Windsor, ON

4d•CA$60,000 - CA$75,000

About The Position

The Cybersecurity Analyst is responsible for monitoring, investigating, responding to, and mitigating cybersecurity threats while also performing proactive network and infrastructure monitoring activities. This role combines Security Operations Center (SOC) and Network Operations Center (NOC) responsibilities to ensure the security, availability, performance, and reliability of client and internal environments. The Cybersecurity Analyst leverages SIEM, MDR, EDR, RMM, monitoring, and automation platforms to identify security threats, infrastructure issues, service disruptions, and operational risks. The role serves as a key escalation point for security events, network outages, system failures, and critical infrastructure alerts.

Requirements

Diploma or Degree in Cybersecurity, Information Technology, Computer Science, Network Security, or related field.
1–3 years of IT or cybersecurity experience.
Experience working with security tools, monitoring platforms, or technical support environments.

Nice To Haves

CompTIA Security+
CompTIA Network+
Certified Ethical Hacker (CEH)
CISSP (Senior Level)

Responsibilities

Monitor security alerts, events, and incidents across client and internal environments.
Conduct proactive threat hunting and anomaly detection activities.
Investigate suspicious activity, indicators of compromise (IOCs), and potential security incidents.
Analyze events generated from monitoring platforms.
Correlate events across multiple security platforms.
Escalate confirmed threats and security incidents according to incident response procedures.
Monitor client infrastructure, cloud services, servers, and network environments.
Respond to alerts generated by RMM, network monitoring systems, backup monitoring systems, etc.
Identify service outages, performance degradation, and capacity concerns.
Monitor, connectivity, firewalls, switches, wireless infrastructure, servers, storage systems, virtualization platforms, and backup systems.
Perform initial diagnosis and remediation of infrastructure alerts.
Escalate unresolved infrastructure issues to IT Systems teams.
Deploy, configure, and maintain security and monitoring solutions.
Support onboarding of monitoring services.
Assist with cybersecurity incident investigations.
Gather logs, evidence, and relevant event information.
Document findings and maintain accurate incident records.
Assist with evidence collection and forensic investigations.
Monitor server health, storage utilization, and resource performance.
Review virtualization platform alerts and performance metrics.
Monitor backup success and failure notifications.
Validate disaster recovery monitoring status.
Review capacity and utilization trends.
Escalate infrastructure risks before service impact occurs.
Support cybersecurity audits and assessments.
Review security controls and compliance requirements.
Participate in risk assessments and security reviews.
Assist technical teams with security investigations and infrastructure monitoring issues.
Communicate findings, risks, and recommendations to clients and internal teams.
Participate in client security reviews and operational meetings.
Support after-hours monitoring and on-call responsibilities.
Create and maintain Security incident reports, NOC event reports, Threat investigation reports, Root cause analyses, Security runbooks, Monitoring procedures, Knowledge base articles.
Produce operational and security reporting for clients and leadership.