Analyste Cybersécurité SOC (Télétravail)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Analyste Cybersécurité SOC (Télétravail) based in Canada.

This fully remote role is an opportunity for a cybersecurity professional to monitor, detect, investigate, and respond to security threats in a structured operational environment. You will work closely with a Canadian client’s IT and security teams while remaining based in your current country of residence. The role focuses on SOC operations, incident response, detection engineering, and security hardening across endpoint and cloud environments. You will use industry-standard EDR and SIEM technologies to identify and investigate suspicious activity. You’ll also contribute to improving detection capabilities, documenting procedures, and strengthening incident response readiness. The position offers stable remote work, international exposure, and compensation designed to be competitive within your local market.

Accountabilities

• Monitor and analyze security alerts generated by EDR, SIEM, and related security monitoring technologies.
• Investigate cybersecurity incidents, determine their scope and severity, and coordinate appropriate response activities.
• Develop, maintain, and continuously improve detection rules and monitoring capabilities.
• Contribute to the hardening and security improvement of endpoint and cloud environments.
• Prepare clear incident reports and maintain accurate documentation of investigations, procedures, and security processes.
• Participate in incident response exercises and help improve organizational preparedness and response procedures.
• Collaborate with IT, security, and other technical stakeholders while maintaining effective communication across distributed teams.
• Work regular hours aligned with the Quebec time zone, including an overlap with the client’s working day.

Requirements

• Demonstrated professional experience in operational cybersecurity, SOC operations, incident response, or a closely related field.
• Strong hands-on experience with an EDR solution; SentinelOne experience is a significant advantage.
• Good working knowledge of SIEM platforms such as Splunk, Microsoft Sentinel, or equivalent technologies.
• Understanding of cybersecurity frameworks and methodologies, particularly MITRE ATT&CK and NIST.
• Strong analytical and investigative skills, with the ability to assess alerts, identify patterns, and respond methodically to security incidents.
• Fluent French, both written and spoken, is required.
• Availability to work long-term within Quebec business hours, typically 9:00 AM–5:00 PM EST.
• Experience with Azure and/or Microsoft Defender is an advantage.
• Professional English proficiency is a plus, particularly for collaboration with international technical teams.
• Security certifications such as AZ-500, Security+, CEH, or GCIA are valued.
• Experience working in an MSP, multi-client, or distributed security environment is an additional advantage.
• Ability to work independently, communicate clearly, document technical findings, and maintain a high level of attention to detail.

Benefits

• Fully remote position, allowing you to remain based in your current country of residence.
• Full-time international employment arrangement through a secure international payroll/contracting structure.
• Compensation positioned above the local market rate.
• Dedicated project management and ongoing professional support.
• Stable, structured remote working environment supporting a Canadian client.
• Exposure to international cybersecurity operations and Canadian IT/security environments.
• No Canadian immigration or work-permit sponsorship is provided; candidates must remain based in their current country.