Analyste Cybersécurité SOC (Télétravail)

Accountabilities:

• • Monitor and analyze security alerts generated by EDR, SIEM, and related security monitoring technologies.
  • Investigate cybersecurity incidents, determine their scope and severity, and coordinate appropriate response activities.
  • Develop, maintain, and continuously improve detection rules and monitoring capabilities.
  • Contribute to the hardening and security improvement of endpoint and cloud environments.
  • Prepare clear incident reports and maintain accurate documentation of investigations, procedures, and security processes.
  • Participate in incident response exercises and help improve organizational preparedness and response procedures.
  • Collaborate with IT, security, and other technical stakeholders while maintaining effective communication across distributed teams.
  • Work regular hours aligned with the Quebec time zone, including an overlap with the client’s working day.

  Requirements:

  • Demonstrated professional experience in operational cybersecurity, SOC operations, incident response, or a closely related field.
  • Strong hands-on experience with an EDR solution; SentinelOne experience is a significant advantage.
  • Good working knowledge of SIEM platforms such as Splunk, Microsoft Sentinel, or equivalent technologies.
  • Understanding of cybersecurity frameworks and methodologies, particularly MITRE ATT&CK and NIST.
  • Strong analytical and investigative skills, with the ability to assess alerts, identify patterns, and respond methodically to security incidents.
  • Fluent French, both written and spoken, is required.
  • Availability to work long-term within Quebec business hours, typically 9:00 AM–5:00 PM EST.
  • Experience with Azure and/or Microsoft Defender is an advantage.
  • Professional English proficiency is a plus, particularly for collaboration with international technical teams.
  • Security certifications such as AZ-500, Security+, CEH, or GCIA are valued.
  • Experience working in an MSP, multi-client, or distributed security environment is an additional advantage.
  • Ability to work independently, communicate clearly, document technical findings, and maintain a high level of attention to detail.

  Benefits:

  • Fully remote position, allowing you to remain based in your current country of residence.
  • Full-time international employment arrangement through a secure international payroll/contracting structure.
  • Compensation positioned above the local market rate.
  • Dedicated project management and ongoing professional support.
  • Stable, structured remote working environment supporting a Canadian client.
  • Exposure to international cybersecurity operations and Canadian IT/security environments.
  • No Canadian immigration or work-permit sponsorship is provided; candidates must remain based in their current country.