Analyst, Cybersecurity - SOC
Dollarama is hiring a SOC cybersecurity analyst to monitor networks, detect and investigate threats using SIEM, IDS/IPS, firewalls, and EDR, respond to incidents, and administer security tools across its stores, warehouses, and head office. The role requires 2-5 years of IT security experience, strong Microsoft/Active Directory knowledge, and participation in a rotating on-call schedule.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Degree or Diploma in IT or IT security/Cybersecurity
- 2-5 years of IT experience in a similar role
- Strong knowledge of Microsoft products (Windows 7, Windows 10, Office Suite 2007, 2010, 2016)
- Good knowledge of Active Directory, AD security, and Office 365
- Good knowledge of security tools (Firewall, Anti-Spam, IDS/IPS, EDR)
- Strong ability to analyze logs from various operating systems (Windows, Linux, Unix) and security tools
- Excellent problem-solving skills
- Collaborative, autonomous, professional, and customer-service oriented approach
- Demonstrates reliability, rigor, and flexibility
- Ability to participate in a weekly rotating on-call schedule
Nice to have
- CISSP certification
Full description
Job Summary
The Cybersecurity Analyst - SOC is responsible for establishing the company’s cybersecurity vision to improve security across stores, warehouses, the distribution center, and head office. The Cybersecurity Analyst works closely with the IT infrastructure team as well as the legal team and provides excellent customer service. In addition, this role requires delivering top expertise to ensure the operation, troubleshooting, and optimization of technological resources used at service points.
Key Accountabilities
- Participate in defining Dollarama’s cybersecurity vision and governance;
- Monitor the network and perform intrusion detection analysis using various network defense tools such as intrusion detection/prevention systems, firewalls, and host-based security systems;
- Detect threats based on logs and endpoints to identify and protect against threats from multiple sources;
- Correlate activity between assets (endpoints, network, applications) and environments (on-premises, cloud) to identify abnormal activity patterns;
- Review alerts and sensor data and document formal technical incident reports;
- Work with filtering and threat-hunting teams;
- Use Security Information and Event Management (SIEM) to manage/tune the system, create/manage detection content, and actively monitor alerts;
- Correlate network, cloud, and endpoint activity across environments to identify attacks and unauthorized use;
- Provide user assistance during incidents, including mitigation measures to contain activity and facilitate forensic analysis if needed;
- Perform security tests on computers before deployment to ensure safety;
- Provide Level II support and, when necessary, investigate security incidents to ensure complete resolution;
- Stay informed about emerging threats and vulnerabilities and remain active in security communities;
- Participate in documenting security elements following the implementation of new projects or security software;
- Develop and maintain standards, guides, and rules regarding the technological security of company systems and infrastructure;
- Act as administrator for installing, configuring, and maintaining security tools and applications;
- Advise development teams on secure application programming standards;
- Select modules for the “cybersecurity awareness” program for Dollarama employees;
- Analyze security logs from various IT systems such as servers (AD, Exchange, etc.), firewalls, Anti-Spam, EDR, IDS/IPS, etc.