Cybersecurity Analyst

About Us:

AlphaKOR was founded in 1995 and specializes in simplifying information technology to help our customers succeed. We combine these technologies into a managed service to provide our customers with the equivalent of a Fortune 500 IT Department to help drive, accelerate, protect, and future proof their businesses. Our guiding philosophies dictate a balance between creating the ultimate experiences for our customers, our teammates and ourselves. As a multi-award-winning company, we have a proven track record of success through merging the worlds of people, processes, and technology.

Position Summary  

The Cybersecurity Analyst is responsible for monitoring, investigating, responding to, and mitigating cybersecurity threats while also performing proactive network and infrastructure monitoring activities. This role combines Security Operations Center (SOC) and Network Operations Center (NOC) responsibilities to ensure the security, availability, performance, and reliability of client and internal environments.  

The Cybersecurity Analyst leverages SIEM, MDR, EDR, RMM, monitoring, and automation platforms to identify security threats, infrastructure issues, service disruptions, and operational risks. The role serves as a key escalation point for security events, network outages, system failures, and critical infrastructure alerts.  

Key Responsibilities – Cybersecurity Analyst  

Security Monitoring & Threat Detection  

• Monitor security alerts, events, and incidents across client and internal environments.  

• Conduct proactive threat hunting and anomaly detection activities.  

• Investigate suspicious activity, indicators of compromise (IOCs), and potential security incidents.  

• Analyze events generated from monitoring platforms.  

• Correlate events across multiple security platforms.  

• Escalate confirmed threats and security incidents according to incident response procedures.  

Security and Network Operations Monitoring  

• Monitor client infrastructure, cloud services, servers, and network environments.  

• Respond to alerts generated by RMM, network monitoring systems, backup monitoring systems, etc.  

• Identify service outages, performance degradation, and capacity concerns.  

• Monitor, connectivity, firewalls, switches, wireless infrastructure, servers, storage systems, virtualization platforms, and backup systems.  

• Perform initial diagnosis and remediation of infrastructure alerts.  

• Escalate unresolved infrastructure issues to IT Systems teams.  

• Deploy, configure, and maintain security and monitoring solutions.  

• Support onboarding of monitoring services.  

Incident Response  

• Assist with cybersecurity incident investigations.  

• Gather logs, evidence, and relevant event information.  

• Document findings and maintain accurate incident records.  

• Assist with evidence collection and forensic investigations.  

Infrastructure & Availability Monitoring  

• Monitor server health, storage utilization, and resource performance.  

• Review virtualization platform alerts and performance metrics.  

• Monitor backup success and failure notifications.  

• Validate disaster recovery monitoring status.  

• Review capacity and utilization trends.  

• Escalate infrastructure risks before service impact occurs.  

Security Compliance & Governance  

• Support cybersecurity audits and assessments.  

• Review security controls and compliance requirements.  

• Participate in risk assessments and security reviews.  

Client Support & Escalation  

• Assist technical teams with security investigations and infrastructure monitoring issues.  

• Communicate findings, risks, and recommendations to clients and internal teams.  

• Participate in client security reviews and operational meetings.  

• Support after-hours monitoring and on-call responsibilities.  

Documentation & Reporting  

• Create and maintain:  

• Security incident reports  

• NOC event reports  

• Threat investigation reports  

• Root cause analyses  

• Security runbooks  

• Monitoring procedures  

• Knowledge base articles  

• Produce operational and security reporting for clients and leadership.  

Qualifications  

Education  

• Diploma or Degree in Cybersecurity, Information Technology, Computer Science, Network Security, or related field.  

Experience  

• 1–3 years of IT or cybersecurity experience.  

• Experience working with security tools, monitoring platforms, or technical support environments.  

Certifications (Preferred) 

• CompTIA Security+ 

• CompTIA Network+ 

• Certified Ethical Hacker (CEH) 

• CISSP (Senior Level) 

If you are interested in capitalizing on this exciting opportunity with one of Southwestern Ontario's leading technology companies, please submit your resume for consideration. 

AlphaKOR Group welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process.