en
Join our Talent Network
Skip to main content
Share this job: share to e-mail

Analyst, Managed Security Services - SIEM


This job posting is no longer active.

Job ID 23001414
Team Engineering
Posted Date Apr 13, 2024
Travel  
Location Mississauga - Forsythe, ON
Eligible for Remote  
Contract Type Full-Time
Security Clearance  

Forsythe Technology is a CDW company. We share common values as a performance-driven, customer-focused culture. CDW is a leading multi-brand provider of information technology solutions to business, government, education and healthcare customers across the globe.

This role will support our Mississauga, Ontario area Security Operations Centre, and can be based from the Toronto area, or remotely from elsewhere in Canada. For this role, we're seeking an individual with a strong background in SIEM tools (IBM QRadar, Splunk, Exabeam, Sumo Logic)
 
The Analyst performs ongoing client support for complex technical performance issues and develops recommendations to ensure adherence to service level agreements and customer service excellence. The Consultant may specialize in a particular discipline and continues to develop a platform of technical expertise. In addition, the Consultant is required to provide input on how to drive process improvements, gain efficiencies, and create opportunities for improved workflow and automation.
 
What You’ll Do:

Services Delivery (65%)

  • Monitor, analyze, and triage cyber security alerts.
  • Take ownership of in-scope cyber incident investigations.
  • Create, manage, and follow up on service tickets.
  • Monitor and manage request and incident queues and provide response and resolution within Service Level Agreement and Service level objective.
  • Follow defined processes. 
  • Correlate data from various log sources ingested in the SIEM during investigations.
  • Design, create, and update documentation as directed.
  • Research and analyze threat intelligence and indicators of compromise (IOC).
  • Review alerts, decipher false positives, and follow through on incident investigations.
  • Evaluate risk of security alerts and make appropriate recommendations to mitigate evaluated risks.
  • Update service tickets and cases with investigation evidence.
  • Apply Trusted Advisor techniques to build up client trust and influence loyalty.
  • Carry out 24 by 7 monitoring of up times on all managed platforms and perform daily health checks on managed SIEM infrastructure.
  • Carry out Rapid IOC searches based on given IOC obtained from threat intelligence feeds across clients’ SIEM infrastructure and Endpoint detection and response platforms.
  • Open technical support cases with respective vendors where applicable

Professional Development (35%)

  • Attend training sessions or shadowing activities and obtain industry-related certifications as determined by the Manager.

What You Need to Succeed:
Must-have:

  • Bachelor's degree (B.A./B.S.) or 3-year diploma in Engineering, Computer Science, or Technology related field
  • At least 1 year of work experience in supporting information technology/systems.
  • At least one (1) technical certification in the technologies for which Sirius offers Managed Security Services. These may include, but are not limited to: QRadar, LogRhythm, Exabeam, or similar technology.
  • Any of these security focused certifications: Comptia Security +, Comptia CYSA, SANS: GCIA, GCIH, CEH

Other Position Requirements:

  • The candidate must be proactive and pay attention to details.
  • Works collaboratively with other teammates. 
  • Takes ownership and drives issues towards a resolution.
  • A good understanding of IT infrastructure systems, Cybersecurity fundamentals, vulnerability management fundamentals, Endpoint and Server administrations, Network routing and switching, Network traffic analysis and administration.
  • Ability to acquire technical skills and certifications required to effectively execute the role, develop familiarity with industry or specialty products/services, and apply the knowledge gained through training.
  • Ability to investigate problems and use standard operating procedures and processes to resolve them.
  • Good troubleshooting and problem-solving skills. Possess an innate curiosity and critical thinking mindset.
  • Ability to establish positive working relationships and contribute to team objectives in a consulting environment.
  • Good verbal, written communication skills and the confidence to engage the clients effectively.
  • Proven time management and organizational skills
  • Word, Excel, Visio, PowerPoint, and Outlook skills

Nice-to-have:

  • Previous experience working in a Security Operations Centre (SOC) environment

Essential Functions:
The position is part of a 7 day per week, 24 hour per day managed services operations. To provide the required coverage, must be willing to work other shifts including weekends, holidays, and overtime.

The above primary duties, responsibilities, and position requirements are not all inclusive.
 
Who we are:
CDW is a leading technology solutions provider to business, government, education and healthcare organizations in Canada, the United States, and the United Kingdom. Our fingerprints can be found on technology in workplaces of more than 250,000 companies; from fresh-faced startups to international conglomerates. With the breadth of products and services we offer, there is no request too big or too small.
 
What you can expect from us:
Culture, coworkers, careers. CDW is not only the People Who Get IT, but the People who get People. Our relationships are fueled by our deep expertise and grounded in the CDW Way. Our empowering leadership makes things happen and inspires their teams to do the same. From the teammates beside us to the leaders who guide us, we move forward together. At CDW, you’ll work with people who inspire you. People with positive, success-driven attitudes who you will learn from and forge strong relationships with. Bring your best true self—and your best ideas—to CDW. Because diverse perspectives bring forth better problem solving—and better solutions for our customers on a rapidly evolving technology landscape.

Share this job: share to e-mail

Similar Jobs

Diversity image

Interview Process

Interested in joining the team?

Discover tips to help prepare you for your job search and what to expect from CDW.

Get started >
Diversity image

Interview Process

Interested in joining the team?

Discover tips to help prepare you for your job search and what to expect from CDW.

Get started >