Spécialiste SOC

Résumé du poste

The SOC Specialist is responsible for real-time security monitoring, alert triage, and active incident response across corporate networks and cloud platforms. Key duties include performing root cause analysis, proactive threat hunting, and refining detection logic to minimize risk.

Détails du poste

SOC Specialist We are seeking a SOC Specialist to serve on the front lines of our digital defense. In this role, you will be responsible for real time security monitoring, alert triage, threat detection, and active incident response across our corporate networks, cloud platforms, and endpoints. You will analyze suspicious behavior, contain active threats, and help continuously refine our detection detection logic to minimize risk. Responsibilities Real Time Threat Detection: Monitor, triage, and analyze security alerts generated by SIEM, EDR, NDR, and identity platforms (e.g., Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne). Incident Response & Containment: Execute initial containment procedures for confirmed incidents—isolating compromised hosts, blocking malicious IPs/hashes, and revoking compromised credentials. Alert Investigation & Forensics: Perform deep dive root cause analysis on security events, examining raw log data, network captures (PCAPs), payload samples, and email headers. Threat Hunting: Proactively search across telemetry logs for undetected adversary activity using MITRE ATT&CK techniques and latest threat intelligence advisories. Qualifications & Skills Experience: 2–4 years in a SOC Analyst (Tier 2) or Incident Response role. Technical Proficiency: Hands on experience with SIEM platforms, EDR solutions, and security orchestration platforms (SOAR). Skills: Strong understanding of TCP/IP networking, OS internals (Windows, Linux, macOS), memory/host artifacts, and common attack vectors (phishing, ransomware, credential abuse). Nice to have CISSP, GSEC, GIAC, or other relevant security certifications. Experience with cloud security platforms including Microsoft Azure, AWS, or Google Cloud Platform. Knowledge of SAP Knowledge of Vulnerability management tools Knowledge of threat intelligence and adversary tradecraft. Familiarity with Identity and Access Management concepts and tools Familiarity with attack surface management and exposure management programs. Experience with scripting and automation using Python, PowerShell, or similar languages. Knowledge of DevSecOps, CI/CD pipelines, and application security practices. Understanding of penetration testing methodologies and vulnerability validation techniques. Bilingual (English and French) communication skills in Canadian environments. Your future duties and responsibilities Required Qualifications To Be Successful In This Role Together, as owners, let’s turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction. Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter. That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals. To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries. Come join our team—one of the largest IT and business consulting services firms in the world.

Ce que vous ferez

The SOC Specialist is responsible for real-time security monitoring, alert triage, and active incident response across corporate networks and cloud platforms. Key duties include performing root cause analysis, proactive threat hunting, and refining detection logic to minimize risk.

Exigences

Candidates need 2–4 years of experience as a Tier 2 SOC Analyst or in Incident Response with proficiency in SIEM and EDR tools. Knowledge of networking, OS internals, and cloud platforms is required, while certifications like CISSP or GSEC are preferred.

Compétences indiquées

• Python · Souhaitée

Autres compétences pertinentes

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• SIEM
• EDR
• NDR
• Incident Response
• Threat Hunting
• TCP/IP Networking
• OS Internals
• MITRE ATT&CK
• Python
• PowerShell
• Cloud Security
• Vulnerability Management
• Forensics
• SOAR
• Identity and Access Management
• DevSecOps

Domaines d’emploi

• Security & Safety
• Technology
• Consulting
• Software
• Data & Analytics