Cyber Security Operations Center Analyst

What Will You Contribute?

As a Cyber Security Operations Center (SOC) Analyst, you will play a critical role in protecting Finastra's global technology environment by monitoring, investigating, and responding to cybersecurity threats and incidents. Working within the Cyber Security Operations team, you will leverage advanced security technologies, threat intelligence, and analytical expertise to identify and mitigate risks across cloud and on-premises environments. This role is ideal for a cybersecurity professional who thrives in a fast-paced operational environment, enjoys solving complex security challenges, and is passionate about continuous learning. You will support North American operations, collaborate with global teams, and contribute to strengthening Finastra's overall security posture. The Finastra Role Catalogue identifies Security Operations professionals as responsible for identifying cybersecurity vulnerabilities, providing situational threat awareness, and managing overall security posture.

Responsibilities & Deliverables

• Monitor, investigate, and respond to security alerts, events, and incidents across enterprise environments using security monitoring and detection tools.

• Perform threat analysis and triage activities to determine the validity, impact, scope, and remediation requirements of potential security threats.

• Support incident response activities, including containment, escalation, tracking, resolution, and post-incident documentation.

• Utilize SIEM platforms, threat detection technologies, and security monitoring tools to proactively identify suspicious activity and security anomalies.

• Assist in the administration, configuration, and optimization of security tools across cloud and on-premises environments.

• Collaborate with internal teams and external security partners to investigate threats and improve security monitoring capabilities.

• Contribute to process improvements, automation opportunities, knowledge documentation, and operational playbooks to enhance SOC effectiveness.

• Participate in an on-call and rotational shift schedule to support continuous security monitoring and operational coverage.

• Embed AI into project delivery to drive productivity, automate routine activities, strengthen decision quality through trusted data, and deliver continuous process improvement while applying appropriate human judgement.

Required Experience & Skills

• Experience working within a Security Operations Center (SOC), Network Operations Center (NOC), security monitoring, or threat management environment.

• Hands-on experience with SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or similar security monitoring platforms.

• Strong understanding of security alerts, threat detection methodologies, incident response processes, and escalation management.

• Knowledge of networking concepts including TCP/IP, DNS, HTTP, SMTP, operating systems, and common cybersecurity attack techniques.

• Experience investigating security events across cloud and on-premises environments using security tools, logs, and threat intelligence data.

• Strong analytical, troubleshooting, and problem-solving skills with the ability to manage multiple priorities in a dynamic environment.

• Excellent communication and collaboration skills with the ability to work effectively across technical and non-technical teams.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline. Cybersecurity certifications such as GSEC, GCIA, GMON, GCDA, CISSP, or similar credentials are preferred. Experience within financial services, fintech, and security automation is considered an asset.

Location: This is a hybrid role with 2 days per week in office requirement (Mississauga, Ontario, Canada). Rotational shift coverage supporting North America. Standard shifts include 9:00 AM - 5:00 PM EST and 1:00 PM - 9:00 PM EST on a rotating basis.