A

Arctiq

IT transformation and cloud solutions provider

SOC Analyst

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeRemote in CanadaNo salary listed

About the Job

Requirements

  • At least one year in an IT security role or an IT support role with significant security responsibilities.
  • Working knowledge of TCP/IP, common protocols, Windows and Linux fundamentals, Active Directory or Entra ID, basic cloud concepts in Azure, AWS, or GCP, and common attacker techniques.
  • Familiarity with at least one SIEM and one EDR/XDR platform, and comfort writing or modifying basic queries such as KQL or SPL.
  • Ability to communicate effectively and collaborate in a diverse, high-performance team environment, with a strong commitment to customer service.
  • Must submit to a background examination.
  • Must be legally authorized to work in the country where the candidate resides.

Responsibilities

  • Continuously monitor and triage alerts and detections across SIEM, EDR/XDR, identity, email, network, and cloud telemetry for managed clients, applying severity classification and initial enrichment to each event.
  • Investigate suspicious activity end-to-end, from validation and pivoting through root-cause analysis, using attacker tradecraft, the MITRE ATT&CK framework, and the cyber kill chain to reach well-supported conclusions.
  • Execute documented response playbooks to contain threats, including isolating hosts, disabling compromised accounts, blocking indicators, resetting credentials, and coordinating handoffs with client and engineering teams.
  • Partner with Detection Engineering to reduce noise and false positives, and propose, test, and deploy new analytics, automations, and SOAR playbooks.
  • Maintain audit-grade case documentation, including notes, timelines, and customer-facing communications, in ticketing and case-management systems.
  • Meet triage, investigation, and notification service-level agreements while maintaining high accuracy, low false-positive rates, and client satisfaction.
  • Feed lessons learned back into detections, playbooks, runbooks, and knowledge-base articles in partnership with SOC Leadership and Detection Engineering.
  • Work an assigned Day, Swing, or Night shift in a 24x7 rotation, including scheduled weekends and holidays, and respond to on-call escalations when required.

About the Company

Arctiq

IT transformation and cloud solutions provider

DynTek provides professional technology services that help organizations transform their IT, modernize digital infrastructure, secure their systems, and move to the cloud. It works by delivering tailored consulting, managed services, and ongoing technology support. The company partners with major vendors such as Cisco, Microsoft, Dell EMC, and VMware to design, implement, and manage IT environments that are secure, efficient, and scalable. What sets DynTek apart is its emphasis on honest, trustworthy, and responsive service, along with a strong focus on serving government agencies, education institutions, healthcare, and enterprises. The goal is to empower clients to operate digitally with confidence, ensuring their IT meets current needs and can grow as requirements evolve.

Company size
201-500
Company stage
IPO
Headquarters
Brentwood, TN
Founded
1989

Recently Posted Jobs

Explore more opportunities at Arctiq

See more jobs