Security Analyst (H/F)

ADVENS•Montreal, QC

169d•Hybrid

About The Position

Join Advens, a European leader in Cybersecurity, committed to transforming digital, environmental, and social challenges into opportunities. With nearly 600 experts across France, Montreal, Tahiti, and Europe, we protect organizations in an increasingly exposed world, making cybersecurity a lever for positive transformation. Our expertise is built on innovative solutions, digital risk management, and a strong commitment to making cybersecurity accessible and impactful. Our ambition is to protect organizations while contributing to societal transformation. In 2024, Advens became an "Entreprise à mission" and the first in France to place vulnerability at the heart of its purpose: "Making vulnerability a strength for cyber, people, and the planet." Our values of Audacity, Collective, Utility, and Integrity drive us to innovate daily and build a more inclusive, secure, and sustainable future. At Advens, you will develop your expertise through training, mobility, and increased autonomy, while working in an environment where teamwork and conviviality are priorities.

Requirements

French mandatory, technical English (written/oral).
Knowledge or mastery of fundamental principles for the following technologies: EDR, Microsoft Sentinel SIEM, Active Directory, network equipment (Firewalls, IPS/IDS), OpenSearch, Cloud.
Autonomy in alert management, distinguishing between true positives and false positives.
Ability to intervene with multiple clients simultaneously from our SOC.
Proactive and reactive in identifying attacks.
Ability to analyze and explain action plans to clients, providing attentive support.
Interest in innovation and improving defense systems, including defining detection rules.
Desire to evolve professionally, potentially becoming a technology referent or moving into other roles.

Responsibilities

Detect, investigate, and qualify security incidents.
Report confirmed security incidents to clients, providing remediation elements.
Accompany a portfolio of clients in protecting their information systems by identifying abnormal behaviors.
Develop and propose a remediation plan adapted to the client's context and business risks.
Communicate detected elements to clients.
Participate in improving the detection techniques and rules for security incidents within our SOC, contributing to the evolution of a differentiating product in the cyber market.
Enrich analyses through correlation between different technologies: SIEM, EDR, network equipment, Active Directory, OpenSearch.
Write technical documentation.
Play an essential role in the 24/7 operational continuity of the SOC and in relaying information between Europe, Canada, and Tahiti.
Analyze weak signals detected by mySOC algorithms.
Interact with N3 experts and the Build team to counter sophisticated attacks.
Provide feedback to the Product team on evolutions to be integrated into analysis and incident reporting tools.
Guide a client's operational security team in analyzing a security incident and share advice.
Advise a client's CISO on operations to perform in response to an incident.