The Global Security Operations Centre (GSOC) is central to eSentire’s Service Delivery Organization (SDO) with a growing team of over 100 passionate members across two SOC locations in Canada and Ireland. The GSOC delivers comprehensive security services to customers worldwide on a 24x7 basis, utilizing best-in-class tooling from both external vendors and internally developed technologies. We are trusted by over 1500 organizations globally to detect and respond to cyber threats and to protect them from business disruption.

eSentire considers employee development, wellbeing, and mental health as top priorities. GSOC Analysts operate on static and predictable 8-hour shifts which offer a healthy work-life balance and are provided with resources to develop and grow their careers.

The successful candidate will perform Tier I security analysis tasks across network and endpoint security in a fast-paced and dynamic environment.

Tier I Responsibilities

• Analyze incoming security signals in real time with a balance of accuracy and speed using a variety of forensic tools
• Apply investigative tools, techniques and procedures (TTPs), use your understanding of the security threats associated with the incoming signals and follow defined runbooks to determine and execute the relevant actions
• Perform allowlisting/filtering of false positive signals
• For confirmed true positive signals, you will alert clients using defined templates and escalate high priority alerts to clients by phone
• Block malicious network traffic and isolate infected hosts on customers networks
• Add malicious IOC’s to eSentire’s Global Denylist for all customers where appropriate
• Complete basic-intermediate client support requests/queries assigned by the operations lead. Work directly with clients via email/phone as needed to complete these tasks
• Handle some service administration and troubleshooting tasks

Requirements

• Relevant degree in Computer Science, IT Security, IT Management, IT Support or related discipline or up to 3+ years equivalent experience. Degree course or industry experience must include a strong focus on networking and security
• Keen interest in Cyber Security with foundational knowledge of network and endpoint security technologies including:
  • Intrusion Detection Systems (IDS), Snort/Suricata
  • Packet Capture (PCAP) Analysis using Wireshark
  • Windows system internals, basic knowledge of PowerShell
  • Linux Kernel and basic scripting (Bash/Python) knowledge
• Analytical mind with strong attention to detail and a commitment to quality of service
• Strong customer facing written and verbal communication skills with the ability to effectively communicate complex security concepts with end customers
• Natural ability to thrive in a fast-paced and time sensitive environment
• Ability to work in an operational/shift-based environment with flexible working hours to include evenings and weekends