Information Security Operations Analyst

Starling Bank

SOC Analyst supporting 24/7 operational capabilities in cybersecurity at Starling. Collaborating with global teams to protect customers and assets through incident response and investigations.

Posted 6/5/2026full-timeToronto • 🇨🇦 CanadaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSCloudCyber SecurityGoGoogle Cloud PlatformJavaLinuxMacOSPython

About the role

Key responsibilities & impact

Supporting 24/7 operational capabilities alongside UK colleagues
Incident Triage, Response, and Investigations based on Alerts received
Investigating and responding to security alerts raised by Users
Enhancing and creating analytic triggers to enhance alert efficacy
Continuous development of incident handling and readiness processes
Proactive threat hunting based on threat intelligence
Documentation of incidents and investigations

Requirements

What you’ll need

3+ years experience in an in-house SOC role and team
Understanding of AWS Security Solutions (or other Public Cloud Solutions)
Analysis and Incident Response experience with Cloud systems (GCP, AWS)
Experience working and supporting analytics/SIEM platforms.
Experience supporting and conducting Incident Response engagements.
Experience in endpoint based investigations.
Experience in cloud based investigations.
Experience with Incident Command and conducting Tabletop Exercises.
Excellent communication skills (both verbal and written), ability to communicate technical concepts to both technical and non-technical audiences.
Demonstrated teamwork and collaboration skills as part of a multi-functional team
Time management, problem-solving and interpersonal skills.
Eagerness to learn and apply knowledge to new security challenges.
Willingness to share knowledge with the team and mentor colleagues.
A high level understanding of mobile, network and operating system security controls.
Preferred
3+ years experience in a cyber incident response and digital forensics function
Experience in forensics: cloud (GCP, AWS); endpoint/server (Windows, MacOS, Linux); and/or network.
Any experience of programming in Python, Go and/or Java.
A Cyber/Information Security related degree and/or relevant cyber security qualification(s) would be desired but not required
Understanding of malware analysis techniques

Benefits

Comp & perks

A discretionary benefits stipend, payable on a monthly basis, is provided
20 days annual leave plus public holidays

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

incident responsecloud systems analysisendpoint investigationscloud investigationsforensicsmalware analysisprogramming in Pythonprogramming in Goprogramming in Javaincident command

Soft Skills

communication skillsteamworkcollaborationtime managementproblem-solvinginterpersonal skillseagerness to learnknowledge sharingmentoring

Certifications

Cyber Security degreeInformation Security qualification