IT Security Analyst

Beneva

IT Security Analyst responsible for advanced analysis of security incidents and supporting SOC operations in Canada. Collaborating with teams to improve detection capabilities and utilizing AI.

Posted 7/3/2026full-timeQuebec • 🇨🇦 CanadaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident response, leveraging advanced analytical skills and knowledge of the MITRE ATT&CK framework. Proficient in using SIEM and EDR platforms, with a focus on continuous improvement and automation in security operations.

Highest-signal resume keywords

Cybersecurity Incident ResponseSIEM PlatformsKQL Query WritingMITRE ATT&CK FrameworkCloud Environment Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityIncident ResponseAnalytical SkillsKQLSPLSIEMXDREDRAutomation ToolsAI Use Cases

Soft Skills

CollaborationDocumentationCommunication

Tools & Technologies

Microsoft SentinelMicrosoft Defender XDRSplunk Enterprise SecurityAWSAzure

Certifications & Qualifications

SC-200CySA+GCIH

Industry Keywords

SOCCybersecurity AlertsIncident AnalysisContinuous ImprovementDetection Rules

Tech Stack

Tools & technologies

AWSAzureSplunk

About the role

Key responsibilities & impact

Take ownership of cybersecurity alerts and incidents escalated by SOC Level 1
Conduct advanced analyses and recommend appropriate actions
Contribute to initial incident response in collaboration with relevant teams
Serve as the technical escalation point and support Level 1 SOC analysts
Participate in continuous improvement of processes, detection rules and SOC metrics
Thoroughly document investigations, findings, decisions and actions taken
Use approved artificial intelligence and automation tools to support triage
Help identify relevant AI use cases to improve SOC efficiency

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity or a related field
Minimum 3–5 years of experience in cybersecurity, including relevant SOC experience
Experience with SIEM, XDR or EDR platforms, notably Microsoft Sentinel, Microsoft Defender XDR or Splunk Enterprise Security
Ability to read and write investigative queries in KQL or SPL
Knowledge of the MITRE ATT&CK framework and ability to apply it in investigations
Familiarity with AI and automation tools applied to cybersecurity
Knowledge of a cloud environment (AWS or Azure)
Functional proficiency in English, both written and spoken
Relevant certifications preferred: SC-200, CySA+, GCIH or equivalent

Benefits

Comp & perks

Health insurance
Retirement plan
Paid time off
Flexible schedule
Employee assistance program
Telemedicine services