{"id":3528350,"url":"https://alion.io/job/onepoint-level-3-cybersecurity-analyst-soc","title":"Level 3 Cybersecurity Analyst (SOC)","company":{"id":45504,"name":"Onepoint","domain":"groupeonepoint.com","url":"https://alion.io/company/groupeonepoint","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":58,"open_postings":144,"ghost_share":0.708,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Montreal, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":114000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":53},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-28T00:00:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T20:22:07Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Company Description\nWepoint is the architect of major transformations for businesses and public sector organizations.\nWe support our clients from strategy through technological implementation, always striving to think beyond the obvious and to act within the framework of Economic, Social, Environmental, and Technological Responsibility (RESET). Our goal is to create new ways of working, new economic models, and smarter environments.\nIn nearly 20 years, we have become one of the key players in digital transformation, employing 3,500 people across Europe, Tunisia, North America, and the Asia-Pacific region.\nWhat We Are Looking For\nCOURAGE - AUTHENTICITY - OPENNESS - COMMITMENT - ELEGANCE\nDo these words resonate with you? They are our company values.\nAt Wepoint, we are looking for committed talents who are ready to share their expertise within open and collaborative teams, and who are not afraid to take initiative. We also value people who are able to challenge themselves and continuously improve.\nAt the heart of relationships at Wepoint are authenticity and the constant pursuit of excellence for our clients - this is what we expect from our future colleagues.\nJob Description\nThe Level III Cybersecurity Analyst position is responsible for providing security expertise to the 24/7 Security Operations Center (SOC). The primary objective of this position is to contribute to the coordination and monitoring of cyber incidents affecting the bank’s critical assets by detecting, preventing, and responding to cyber threats targeting the group’s infrastructure. This role provides essential support to the organization’s overall cybersecurity program through close collaboration with the various lines of business across the region, as well as with external clients, partners, and regulatory authorities. As a Production Security Analyst, you will be responsible not only for the real-time monitoring, analysis, and resolution of identified security incidents, but also for the continuous improvement and development of the 24/7 Security Operations Center (SOC) capabilities, which serve as the first line of defense in identifying potential information security incidents.\nResponsibilities\nAnalyze security log data from a wide range of heterogeneous security devices and identify trends;\nBe responsible for the development and validation of use cases;\nProvide Incident Response (IR) support or escalate when analysis confirms that an incident requires action;\nPerform threat and vulnerability analysis and provide security advisory services;\nDevelop the Threat Hunting program and capabilities;\nAnalyze and respond to previously undisclosed software and hardware vulnerabilities;\nInvestigate, document, and report on information security issues and emerging trends;\nPerform Threat Hunting activities to identify potential malicious actors within the network;\nPerform digital forensic investigations on compromised systems to determine the extent and nature of the compromise and provide recommendations regarding appropriate remediation measures;\nProvide support and conduct research regarding any security-related questions or incidents;\nPerform tasks independently with some level of oversight;\nIntegrate and share information with other analysts and teams;\nMonitor the bank’s various sources for potential security incidents, health alerts related to monitored solutions, and requests for information. This includes monitoring real-time channels or dashboards, periodic reports, email inboxes, help desks or other ticketing systems, telephone calls, and chat sessions;\nFollow incident-specific procedures to triage potential security incidents, validate them, determine the necessary mitigation measures, and keep these procedures up to date;\nEscalate potential security incidents to Level IV engineers, implement countermeasures in response to requests, and recommend operational improvements;\nAccurately document incident information and notes in the case management system;\nMaintain up-to-date knowledge of the bank’s technology architecture, known vulnerabilities, the architecture of the security solutions used for monitoring, imminent and widespread threats identified through client threat intelligence, and recent security incidents;\nContinuously improve the service by identifying and addressing issues or knowledge gaps, including analysis procedures, response playbooks, and client network models; tuning false positives; and identifying and recommending new or updated tools, content, countermeasures, or scripts;\nServe as a subject matter expert in at least one security-related area, such as a specific anti-malware solution, Python programming, etc.;\nActively seek to develop skills through continuous learning and pursue advancement to a Level IV Analyst position;\nComply with internal operational security policies as well as other BNP Paribas policies;\nPerform limited-scope project work as required.\nQualifications\nConnaissance ou 3 à 5 ans d’expérience avec les technologies suivantes : SIEM, ELK, IDS/IPS, pare-feu réseau et hôte, solutions de prévention des fuites de données (DLP);\nExpérience pratique avec les logiciels antivirus, les solutions de détection et de réponse sur les terminaux (EDR), les pare-feu et les solutions de filtrage de contenu;\nExpérience ou connaissances démontrables en réponse aux incidents, analyse de journaux (\"logs\") et analyse de captures réseau (PCAP);\nBonne connaissance des principes fondamentaux des réseaux, notamment : modèle OSI, TCP/IP, DNS, HTTP(S) et SMTP;\nBonne compréhension des méthodes utilisées par les acteurs malveillants pour attaquer un réseau, notamment l’hameçonnage (\"phishing\"), le balayage de ports (\"port scanning\"), les attaques contre les applications Web, les attaques DDoS et les mouvements latéraux;\nConnaissance des systèmes d’exploitation Windows et/ou Linux, ainsi que des méthodes permettant de les analyser afin d’identifier des signes de compromission;\nRéel intérêt pour l’apprentissage et volonté de contribuer au développement continu de l’équipe;\nConnaissances de base en langages de script (\"scripting\").\nCapacité à démontrer une méthodologie rigoureuse dans l’investigation des alertes et/ou des indicateurs de compromission, et à documenter les conclusions de manière à ce qu’elles soient compréhensibles aussi bien par les collègues techniques que par les membres de la haute direction;\nBonne compréhension des rôles complémentaires des différentes équipes de cybersécurité et capacité à collaborer avec celles-ci, notamment les équipes de forensique numérique, renseignement sur les menaces (\"Threat Intelligence\"), tests d’intrusion (\"Penetration Testing\"), gestion des vulnérabilités, etc.;\nCapacité à gérer des charges de travail variables, des priorités concurrentes et plusieurs activités simultanément;\nExcellentes capacités d’analyse;\nExcellente communication en français et en anglais. L'anglais est requis, le poste demandant de communiquer avec des clients et des partenaires situés à l'extérieur du Québec.\nSeuls les candidat(es) légalement autorisés(ées) à travailler pour tout employeur au Canada seront considérés(ées)\nWepoint Benefits\nMinimum of 3 weeks of vacation starting from the first year;\nComprehensive group insurance with a generous employer contribution;\nEmployer contribution to a group RRSP;\nFull remote work flexibility: Hybrid, Remote, or On-site;\nA warm, bright, and welcoming office offering fresh fruit, coffee, beverages, occasional meals, etc.;\nAnnual IT equipment budget;\nA balanced work environment with flexible working hours;\nCareer development: training and certifications, online or in-person learning, Wepoint Academy, etc.;\nAn international community of experts ready to share their knowledge;\nA company culture focused on individuals’ needs and their belonging to a strong community.\n#tech&security\nPermis CNESST : AP-2504754, AP-2504755, AR-2504756","description_format":"text","description_chars":7909,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"All levels","optional":false}]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-30T15:04:08Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":25,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-10-30T22:48:29Z"},"pay":null,"html_url":"https://alion.io/job/onepoint-level-3-cybersecurity-analyst-soc","json_url":"https://alion.io/job/onepoint-level-3-cybersecurity-analyst-soc.json","meta":{"generated_at":"2026-10-30T22:48:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13739,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":45504},"rest":"https://alion.io/mcp/rest/get_company?id=45504"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonepoint-level-3-cybersecurity-analyst-soc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonepoint-level-3-cybersecurity-analyst-soc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonepoint-level-3-cybersecurity-analyst-soc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onepoint-level-3-cybersecurity-analyst-soc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonepoint-level-3-cybersecurity-analyst-soc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3528350}},{"tool":"search_jobs","arguments":{"company":"groupeonepoint.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3528350},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}