SOC Tier 1 Analyst

MNP•Montreal, QC

About The Position

Make an impact with our Managed Security Services team as a SOC Tier 1 Analyst. This diverse team of tech-savvy problem solvers enables clients to take a proactive and prepared approach to cyber crime and capitalize on new technologies and innovations. As a security defender, you’ll investigate threats, develop policies and enhance infrastructure to minimize the impact of security-related events and protect clients’ business operations and reputation. At MNP, you will work alongside a collaborative team of creative thinkers and problem-solvers. You will gain hands-on experience, tackle meaningful challenges, and grow your skills in an environment where your voice is valued, and your development is a priority. If you are ready to accelerate your career and make a lasting impact, this is where your journey begins.

Requirements

Fundamental understanding of core cybersecurity principles, including common threats, vulnerabilities, attack vectors, and security controls.
Familiarity with Security Information and Event Management (SIEM) concepts and systems.
Exposure to Endpoint Detection and Response (EDR) concepts.
Basic understanding of common networking protocols and their relevance to security event analysis.
Familiarity with Windows and/or Linux operating system fundamentals.
Strong troubleshooting skills
Demonstrated ability to accurately follow detailed technical documentation, such as playbooks and SOPs.
Post-Secondary Degree or Diploma in Information Technology, Computer Science, or a related discipline, or equivalent hands-on experience in a cybersecurity or IT operations role.
Ideally, 1-2 years of prior experience working within a Security Operations Center (SOC) or a closely related IT security function (e.g., network security, system administration with security focus). However, motivated recent graduates with relevant cybersecurity coursework, internships, or demonstrable passion and foundational skills will be actively considered.

Nice To Haves

Direct experience with AlienVault and Microsoft Sentinel, including alert triage and executing basic KQL queries, is highly preferred.
Experience navigating and utilizing the Microsoft Defender for Endpoint, SentinelONE, or Sophos is advantageous.
Basic knowledge of the MITRE ATT&CK framework and its application in understanding attacker techniques is beneficial.
Experience with the following technologies: Check Point, Palo Alto, AlienVault, Microsoft Sentinel, Microsoft Defender, SentinelOne.
Foundational cybersecurity certifications such as Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) or CompTIA Security+ are desirable.
Holding or actively pursuing the Microsoft Certified: Security Operations Analyst Associate (SC-200) is a strong advantage.

Responsibilities

Continuously monitor security alerts within diverse security platforms like Microsoft Sentinel and Microsoft Defender XDR.
Perform initial triage and analysis of incoming security alerts according to predefined playbooks and Standard Operating Procedures (SOPs).
Utilize basic Kusto Query Language (KQL) queries within Microsoft Sentinel to investigate alerts and gather preliminary event context.
Work with both clients and vendors to troubleshoot and resolve issues
Investigate assigned tickets; responsible for the task until it has been completed/resolved
Monitor and resolve incidents and support requests; ensure response/resolution within service level agreement (SLA) targets
Escalate complex, high-severity, or confirmed security incidents to SOC Tier 2 Analysts promptly, providing clear, concise, and accurate information.
Meticulously document all investigation steps, findings, and actions taken within the designated ticketing system.
Maintain situational awareness regarding the current cyber threat landscape and the specific security posture of monitored client environments during each shift.
Participate actively in shift handover procedures to ensure seamless continuity of operations and knowledge transfer between analyst teams.
Contribute to the development of new ideas and approaches to improve work processes
Attend internal MNP courses to further develop knowledge around performance improvement