Security Operations Centre (SOC) Analyst - Night Shift

About the role

Are you passionate about cybersecurity? Are you eager to apply your technical and investigative skills for the public good? If so, we have an exciting opportunity for you!

Cybera is a not-for-profit agency whose mission is to improve the lives of Albertans through the use and advancement of digital technologies. We serve the province’s education, research and government sectors. To support the higher education sector in defending themselves from online harms, Cybera has established a regional Security Operations Centre (rSOC) to monitor, detect, and respond to cybersecurity threats..

As a SOC Analyst (night shift), you will have an opportunity to respond to incidents and make a real-world impact. Working independently overnight, your key factors for success include the ability to effectively identify and investigate incidents, manage escalations, and work with our member institutions throughout the incident lifecycle. Cybera is committed to continuous learning and professional development so you can advance your cybersecurity skills and experience while helping us safeguard post-secondary institutions.

What you’ll do

• Conduct proactive monitoring, investigation, and escalation of security incidents.
• Identify potential or suspected intrusion attempts and compromises by analyzing relevant event details and summary information.
• Investigate malicious URLs, domains, and IPs using open-source and sector intelligence.
• Provide mitigation guidance and support in response to identified threats, based on common industry practices and vendor recommendations.
• Continuously develop and refine investigative methods for anomalous or suspicious events, in collaboration with other rSOC team members.
• Actively contribute to and maintain the knowledge base for rSOC processes and procedures.
• Utilize playbooks, guidelines, and various techniques for investigating incidents.
• Report gaps in log coverage, parsing issues, and high-volumes of false positives.
• Act as the first point of contact for member-reported security incidents and service requests in accordance with established SLAs.
• Apply cybersecurity and privacy principles to meet organizational requirements.

What you bring

Education and experience

• Cybersecurity diploma or equivalent technical training in cybersecurity.
• Relevant certifications preferred, such as CompTIA Security+, CySA+, or similar qualifications.
• Demonstrated passion for cybersecurity and a commitment to continuous learning.
• Hands-on experience through academic projects, Capture the Flag (CTF) competitions, or practical labs (e.g. HackTheBox, LetsDefend) is highly desirable.
• Familiarity with following documented cybersecurity processes and procedures, along with a strong willingness to learn incident response workflows.
• Previous experience working night shifts or working independently is an asset.

Skills

• Understanding of cybersecurity threats and risks to the academic sector.
• Experience in identifying and investigating security incidents.
• Practical understanding of cybersecurity concepts, such as incident response practices, vulnerability management, and IT service management.

Technical proficiencies

• Experience with SIEM and UEBA technologies, and following playbooks for incident response.
• An understanding of the MITRE ATT&CK framework.
• Experience with investigating suspicious sign-ins, phishing, malware, and network log analysis.
• Ability to document and explain technical information clearly and concisely to diverse audiences.
• An understanding of TCP/IP and other network protocols.
• Experience with using threat intelligence feeds; problem solving and analytical thinking skills.
• Strong documentation and communication skills.

These requirements represent an ideal candidate. The potential of the individual’s background and experience to meet the responsibilities and expectations of the role is considered in all instances.

This is your opportunity to be a part of a newly formed rSOC that will change the security landscape for post-secondary institutions!

Schedule and conditions of employment

The rSOC operates 24 hours a day, 7 days a week. This role is for a dedicated night shift covering overnight hours from 10:00 pm to 6:00 am ABT (Alberta time), including weekends and holidays.

Selected candidates will be required to provide a satisfactory employment and criminal record check as a condition of employment.

Compensation and location

Preference will be given to Calgary, Alberta residents; however, remote work within Canada will also be considered. Salary will be commensurate with experience. No relocation costs will be awarded.

Benefits of working at Cybera

This is your opportunity to work for a flexible, tech-forward not-for-profit that is helping Canada become a more equitable place to work, learn, and play! We offer:

• A remote working environment.
• Highly supportive and inclusive work culture.

Benefits:

• Health & Vision benefits from day 1.
• Long & Short term disability benefits from day 1.
• Flexible Health Spending Account (after successful probation).
• Annual professional development funds.
• Regular Lunch & Learns covering department updates to EDI topics.
• RRSP program (after successful probation).
• Healthy snacks in the office - and sometimes unhealthy snacks.
• 10 days per year to use for sick time or mental health breaks.
• The opportunity to invest in yourself and your career.

How to apply

This posting will remain open until a suitable candidate is found. Your application should include a resume and a short response (in your own words) to four application questions listed below. Your answers should demonstrate how your skillset matches the position requirements (of course we don't expect you to have them all!) While we appreciate all applications, only candidates selected for an interview will be contacted. No phone calls or recruiter assistance at this time, please.

All qualified applicants will receive consideration for employment without regard to race, religious beliefs, colour, gender, disability, age, ancestry, place of origin, marital status, source of income or family status of that person or of any other person.

Number of hires for this role: 2