F

Fortinet

Delivers integrated cybersecurity via security fabric

SOC Analyst

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeBurnaby, BC, Canada

About the Job

Requirements

  • Understanding of security operations center operations and the incident response lifecycle.
  • Understanding of the Cyber Kill Chain, threat vectors, and threat intelligence.
  • Understanding of layered security at the data, operating system, and network levels.
  • Understanding of cybersecurity frameworks.
  • Hands-on experience with security log analysis, such as antivirus, intrusion prevention system, and anti-spam logs.
  • Hands-on experience with visualization and reporting technologies.
  • Hands-on experience with PostgreSQL and regular expressions.
  • Hands-on experience with network security technologies such as firewalls, security information and event management systems, and sandboxes.
  • Hands-on experience with Linux and Windows system administration.
  • Graduates from information technology degrees or mid-career information technology professionals with cybersecurity certifications may apply.
  • The role requires working five days and 40 hours per week, including one weekend day and four weekdays, from 9 a.m. to 5 p.m.

Responsibilities

  • Monitor security operations center alerts to detect potential threats.
  • Use threat intelligence feeds, triage alerts, and filter out false positives.
  • Create custom reports and dashboards, and execute log searches to support investigations and customer requirements.
  • Work with customers and the forensic analysis team to contain and eradicate incidents when needed.
  • Follow incident response playbooks, processes, and procedures, and help improve them.
  • Create or update use-case detections to detect new threats from raw logs.
  • Create or update playbooks to automate repetitive triage steps.

Desired Qualifications

  • Previous work experience with Fortinet products is a bonus.
  • Cybersecurity certifications such as GCIA, GCIH, GMON, GSOC, CEH, or Security+ are a bonus.

About the Company

Fortinet

Delivers integrated cybersecurity via security fabric

Fortinet provides cybersecurity solutions for organizations with an integrated security approach. Its core offering, the Fortinet Security Fabric, connects firewalls, endpoint protection, intrusion detection, and secure SD-WAN so these tools share threat intelligence and policy controls. The company differentiates itself with a wide, interoperable security stack that spans network, endpoint, cloud, and threat intelligence, enabling centralized management and consistent security across environments. Fortinet aims to help organizations protect digital assets across on-premises, remote, and cloud settings through scalable security and ongoing subscription services.

Company size
10,001+
Company stage
IPO
Headquarters
Sunnyvale, CA
Founded
2000

Recently Posted Jobs

Explore more opportunities at Fortinet

See more jobs