{"id":2954254,"url":"https://alion.io/job/cybera-security-operations-centre-soc-analyst-night-shift","title":"Security Operations Centre (SOC) Analyst - Night Shift","company":{"id":1053572,"name":"Cybera","domain":"cybera.ca","url":"https://alion.io/company/cybera","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":true},{"name":"SIEM","optional":true},{"name":"TCP/IP","optional":true}],"status":"live","first_seen_at":"2026-10-20T20:56:04Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T00:43:33Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About the role\nAre you passionate about cybersecurity? Are you eager to apply your technical and investigative skills for the public good? If so, we have an exciting opportunity for you!\nCybera is a not-for-profit agency whose mission is to improve the lives of Albertans through the use and advancement of digital technologies. We serve the province’s education, research and government sectors. To support the higher education sector in defending themselves from online harms, Cybera has established a regional Security Operations Centre (rSOC) to monitor, detect, and respond to cybersecurity threats..\nAs a SOC Analyst (night shift), you will have an opportunity to respond to incidents and make a real-world impact. Working independently overnight, your key factors for success include the ability to effectively identify and investigate incidents, manage escalations, and work with our member institutions throughout the incident lifecycle. Cybera is committed to continuous learning and professional development so you can advance your cybersecurity skills and experience while helping us safeguard post-secondary institutions.\nWhat you’ll do\nConduct proactive monitoring, investigation, and escalation of security incidents. \nIdentify potential or suspected intrusion attempts and compromises by analyzing relevant event details and summary information.\nInvestigate malicious URLs, domains, and IPs using open-source and sector intelligence. \nProvide mitigation guidance and support in response to identified threats, based on common industry practices and vendor recommendations. \nContinuously develop and refine investigative methods for anomalous or suspicious events, in collaboration with other rSOC team members.\nActively contribute to and maintain the knowledge base for rSOC processes and procedures.\nUtilize playbooks, guidelines, and various techniques for investigating incidents.\nReport gaps in log coverage, parsing issues, and high-volumes of false positives. \nAct as the first point of contact for member-reported security incidents and service requests in accordance with established SLAs. \nApply cybersecurity and privacy principles to meet organizational requirements. \nWhat you bring\nEducation and experience\nCybersecurity diploma or equivalent technical training in cybersecurity.\nRelevant certifications preferred, such as CompTIA Security+, CySA+, or similar qualifications.\nDemonstrated passion for cybersecurity and a commitment to continuous learning.\nHands-on experience through academic projects, Capture the Flag (CTF) competitions, or practical labs (e.g. HackTheBox, LetsDefend) is highly desirable.\nFamiliarity with following documented cybersecurity processes and procedures, along with a strong willingness to learn incident response workflows. \nPrevious experience working night shifts or working independently is an asset.\nSkills\nUnderstanding of cybersecurity threats and risks to the academic sector.\nExperience in identifying and investigating security incidents.\nPractical understanding of cybersecurity concepts, such as incident response practices, vulnerability management, and IT service management.\nTechnical proficiencies\nExperience with SIEM and UEBA technologies, and following playbooks for incident response.\nAn understanding of the MITRE ATT&CK framework. \nExperience with investigating suspicious sign-ins, phishing, malware, and network log analysis. \nAbility to document and explain technical information clearly and concisely to diverse audiences.\nAn understanding of TCP/IP and other network protocols. \nExperience with using threat intelligence feeds; problem solving and analytical thinking skills. \nStrong documentation and communication skills. \nThese requirements represent an ideal candidate. The potential of the individual’s background and experience to meet the responsibilities and expectations of the role is considered in all instances.\nThis is your opportunity to be a part of a newly formed rSOC that will change the security landscape for post-secondary institutions!\nSchedule and conditions of employment\nThe rSOC operates 24 hours a day, 7 days a week. This role is for a dedicated night shift covering overnight hours from 10:00 pm to 6:00 am ABT (Alberta time), including weekends and holidays.\nSelected candidates will be required to provide a satisfactory employment and criminal record check as a condition of employment.\nCompensation and location\nPreference will be given to Calgary, Alberta residents; however, remote work within Canada will also be considered. Salary will be commensurate with experience. No relocation costs will be awarded.\nBenefits of working at Cybera\nThis is your opportunity to work for a flexible, tech-forward not-for-profit that is helping Canada become a more equitable place to work, learn, and play! We offer:\nA remote working environment.\nHighly supportive and inclusive work culture.\nBenefits:\nHealth & Vision benefits from day 1.\nLong & Short term disability benefits from day 1.\nFlexible Health Spending Account (after successful probation).\nAnnual professional development funds.\nRegular Lunch & Learns covering department updates to EDI topics.\nRRSP program (after successful probation).\nHealthy snacks in the office - and sometimes unhealthy snacks.\n10 days per year to use for sick time or mental health breaks.\nThe opportunity to invest in yourself and your career.\nHow to apply\nThis posting will remain open until a suitable candidate is found. Your application should include a resume and a short response (in your own words) to four application questions listed below. Your answers should demonstrate how your skillset matches the position requirements (of course we don't expect you to have them all!) While we appreciate all applications, only candidates selected for an interview will be contacted. No phone calls or recruiter assistance at this time, please.\nAll qualified applicants will receive consideration for employment without regard to race, religious beliefs, colour, gender, disability, age, ancestry, place of origin, marital status, source of income or family status of that person or of any other person.\nNumber of hires for this role: 2","description_format":"text","description_chars":6183,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Incident Response","Internet Service Providers","Information Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-20T20:56:04Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":52,"reasons":["conf:3","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/cybera-security-operations-centre-soc-analyst-night-shift","json_url":"https://alion.io/job/cybera-security-operations-centre-soc-analyst-night-shift.json","meta":{"generated_at":"2026-10-24T03:09:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4914,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1053572},"rest":"https://alion.io/mcp/rest/get_company?id=1053572"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcybera-security-operations-centre-soc-analyst-night-shift"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcybera-security-operations-centre-soc-analyst-night-shift"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcybera-security-operations-centre-soc-analyst-night-shift"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cybera-security-operations-centre-soc-analyst-night-shift\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcybera-security-operations-centre-soc-analyst-night-shift"}]}