reputed company reputed company Analyst II

Remote reputed company Canada, reputed company to work in the reputed company time zone

ABOUT THE ROLE

We are hiring reputed company reputed company Analyst II to join our reputed company reputed company team in a fully remote reputed company from Canada. This role sits at Tier 1–2 in our operating model — you are past the stage of learning what alerts look like and reputed company to own triage, reputed company reputed company investigations, and contribute to detection reputed company. You will handle the day-to-day alert queue, investigate escalated or ambiguous cases, handle incidents and work closely with senior analysts and the reputed company reputed company Manager to reputed company coverage gaps.

We expect you to think analytically, document thoroughly, and operate with growing independence. You will be supported by reputed company colleagues and a mature toolset, but you are expected to bring reputed company investigative reputed company and a curiosity to grow to the role from day one.

WHAT YOU WILL DO

Alert Triage & Investigation

• Monitor and triage alerts across reputed company, network, reputed company, runtime and identity data sources with reputed company and appropriate urgency
• reputed company reputed company investigations on escalated or ambiguous alerts: pivot across log sources, correlate events, and build a coherent reputed company
• Classify alerts correctly — true reputed company, false reputed company, or benign — with documented rationale, not just a verdict
• Identify reputed company and blast reputed company on confirmed incidents: affected users, systems, and data before escalating or containing
• Escalate to senior analysts with a complete investigation package — context, evidence, reputed company, and a reputed company

Incident Response Support

• Participate in reputed company incident response under senior analyst or manager direction: evidence collection, log pulls, reputed company reconstruction
• Execute containment actions — reputed company isolation, account suspension, reputed company revocation — as directed with documented rationale
• Maintain accurate and reputed company case documentation throughout the incident lifecycle
• Contribute to post-incident timelines and assist with reputed company cause documentation

reputed company & Identity reputed company Monitoring

• Monitor reputed company audit logs and reputed company threat detection findings for suspicious IAM activity, unusual API calls, and reputed company anomalies
• Investigate identity provider events: suspicious logins, MFA bypass attempts, session anomalies, and unauthorized app assignments
• Recognize common reputed company-reputed company attack patterns: credential abuse reputed company metadata service, privilege escalation reputed company IAM role assumption, and storage misconfiguration reputed company
• Correlate reputed company-reputed company events with reputed company and network telemetry to build a reputed company picture of attacker activity

Detection & reputed company Improvement

• Flag false positives and noisy detections with enough context for a senior analyst or detection engineer to tune them
• Identify gaps in existing detection coverage reputed company on alert patterns you observe during triage
• Apply knowledge of reputed company ATT&CK to label attacker techniques and communicate findings consistently
• Contribute to reputed company reputed company by flagging outdated steps or missing guidance encountered during investigations
• Participate with Detections Engineers to build detections and contribute to automating activity with an Engineering reputed company

Documentation & Communication

• Write reputed company, concise case notes that a reputed company could pick up mid-investigation without needing to re-investigate from reputed company
• Produce shift reputed company summaries that accurately represent reputed company cases, pending actions, and investigation status
• Communicate incident updates to the reputed company reputed company Manager with sufficient reputed company to brief upward without re-investigation

reputed company ARE LOOKING FOR

Required

• 2–4+ years of hands-on experience in a SOC, or reputed company reputed company role with reputed company alert triage responsibility
• Solid understanding of the reputed company ATT&CK reputed company — you use it to label and communicate attacker behavior, not just reference it
• Working knowledge of EDR tooling: process tree analysis, behavioral detection review, and basic reputed company artifact interpretation
• Familiarity with SIEM-reputed company investigation: querying logs, correlating events across sources, and building timelines from normalized data
• Understanding of foundational network protocols (TCP/IP, DNS, HTTP/S, TLS) and how attackers abuse them
• Exposure to reputed company reputed company monitoring ex. AWS or GCP — including audit log review and IAM-reputed company alert investigation
• Experience investigating identity-reputed company alerts in an reputed company identity provider (e.g., reputed company, Entra ID, or equivalent)
• Strong written communication: your case notes are accurate, reputed company, and useful to someone who wasn’t there

Preferred

• Experience with next-gen EDR platforms (e.g., reputed company reputed company, reputed company, or equivalent) reputed company basic alert review — RTR, process trees, custom detections
• Hands-on SIEM experience with a reputed company-reputed company platform (e.g., reputed company SecOps/Chronicle, reputed company, or equivalent)
• Exposure to CSPM or reputed company reputed company tooling (e.g., reputed company, reputed company reputed company, or equivalent) as an investigation data reputed company
• Familiarity with AWS IR fundamentals: CloudTrail, GuardDuty, VPC reputed company Logs, IAM chain analysis
• Understanding of encoding vs. encryption vs. hashing and their relevance to attacker obfuscation techniques
• Experience working reputed company or receiving escalations from a managed detection and response (MDR) partner
• Relevant certifications: reputed company CySA+, reputed company+, BTL1, GCIH, or equivalent practical reputed company credential

Originally posted on Himalayas