Summary

The Bell Security Operations Center (SOC) team is a specialized group of cybersecurity professionals responsible for monitoring, detecting, and responding to security. We operate 24/7, the SOC team plays a critical role in safeguarding sensitive information, systems, and assets from unauthorized access, attacks, and breaches. The SOC is the primary contact for any suspected security incident and work together with other teams on resolving incidents and remediating threats.

Key Responsibilities

Security Monitoring:

• Continuously monitor and analyze security logs, event logs, and network traffic to identify potential security incidents or anomalies.
• Use SIEM tools and other security monitoring technologies to automate threat detection and incident identification.
• Stay updated with the latest threat intelligence to recognize emerging threats and vulnerabilities.

Incident Detection and Triaging:

• Investigate and triage security alerts to determine their severity and potential impact.
• Prioritize incidents based on risk level and business impact, and escalate incidents to the appropriate response team.
• Collaborate with other SOC team members and security stakeholders to gather additional information and context for incident analysis.

Reporting and Communication:

• Generate incident reports and provide regular updates to management and stakeholders on the status of security incidents and overall security posture.
• Communicate effectively with other SOC team members, IT personnel, and cross-functional teams to facilitate incident response and resolution.
• Document security incidents and lessons learned to improve the organization’s security posture.

Continuous Improvement:

• Stay up-to-date with the latest security trends, threats, and technologies to enhance the effectiveness of SOC operations.
• Continuously evaluate and improve SOC processes, procedures, and tools to optimize threat detection and response capabilities.

Critical Qualifications

• Strong understanding of operating systems, networking, and security protocols.
• Proficiency in analyzing system logs, event logs, and network traffic.
• Experience with security information and event management (SIEM) tools and threat detection technologies.
• Familiarity with scripting languages such as Python or PowerShell for automation tasks.
• Knowledge of vulnerability assessment and penetration testing methodologies.
• Experience with incident response and remediation procedures.

Preferred Qualifications

• Bilingual; In the course of their duties, this person will be required to interact with French & English speaking stakeholders across Canada
• Certification in Cyber Security (Security+ or equivalent)
• SCRUM foundations
• Excellent analytical and problem-solving abilities.
• Strong attention to detail and the ability to work effectively under pressure.
• Effective communication and teamwork skills, both written and verbal.
• Ability to prioritize tasks and manage multiple responsibilities simultaneously.
• Continuous learning mindset and willingness to stay updated with the latest cybersecurity trends.
• Strong ethical standards and commitment to information security best practices.