Cyber Security Operations Center Analyst

Who are we? At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission‑critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries. What Will You Contribute? As a Cyber Security Operations Center (SOC) Analyst, you will play a critical role in protecting Finastra's global technology environment by monitoring, investigating, and responding to cybersecurity threats and incidents. Working within the Cyber Security Operations team, you will leverage advanced security technologies, threat intelligence, and analytical expertise to identify and mitigate risks across cloud and on-premises environments. This role is ideal for a cybersecurity professional who thrives in a fast-paced operational environment, enjoys solving complex security challenges, and is passionate about continuous learning. You will support North American operations, collaborate with global teams, and contribute to strengthening Finastra's overall security posture. The Finastra Role Catalogue identifies Security Operations professionals as responsible for identifying cybersecurity vulnerabilities, providing situational threat awareness, and managing overall security posture. Responsibilities & Deliverables Monitor, investigate, and respond to security alerts, events, and incidents across enterprise environments using security monitoring and detection tools. Perform threat analysis and triage activities to determine the validity, impact, scope, and remediation requirements of potential security threats. Support incident response activities, including containment, escalation, tracking, resolution, and post-incident documentation. Utilize SIEM platforms, threat detection technologies, and security monitoring tools to proactively identify suspicious activity and security anomalies. Assist in the administration, configuration, and optimization of security tools across cloud and on-premises environments. Collaborate with internal teams and external security partners to investigate threats and improve security monitoring capabilities. Contribute to process improvements, automation opportunities, knowledge documentation, and operational playbooks to enhance SOC effectiveness. Participate in an on-call and rotational shift schedule to support continuous security monitoring and operational coverage. Required Experience & Skills Experience working within a Security Operations Center (SOC), Network Operations Center (NOC), security monitoring, or threat management environment. Hands-on experience with SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or similar security monitoring platforms. Strong understanding of security alerts, threat detection methodologies, incident response processes, and escalation management. Knowledge of networking concepts including TCP/IP, DNS, HTTP, SMTP, operating systems, and common cybersecurity attack techniques. Experience investigating security events across cloud and on-premises environments using security tools, logs, and threat intelligence data. Strong analytical, troubleshooting, and problem-solving skills with the ability to manage multiple priorities in a dynamic environment. Excellent communication and collaboration skills with the ability to work effectively across technical and non-technical teams. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline. Cybersecurity certifications such as GSEC, GCIA, GMON, GCDA, CISSP, or similar credentials are preferred. Experience within financial services, fintech, and security automation is considered an asset. Location: This is a hybrid role with 2 days per week in office requirement (Mississauga, Ontario, Canada). Rotational shift coverage supporting North America. Standard shifts include 9:00 AM - 5:00 PM EST and 1:00 PM - 9:00 PM EST on a rotating basis. As part of our hiring process, we may use artificial intelligence (AI) technology to help screen and shortlist applications. All final hiring decisions are made by our recruitment team. This position is for an existing vacancy within our organization. Compensation: CAD 95,000-100,000 Annual. Finastra is committed to providing accessible employment practices that are in compliance with the Accessibility for Ontarians with Disabilities Act (AODA). We will accommodate applicants' needs upon request, throughout all stages of the recruitment process. Please inform us of the accommodation(s) that you may require. Information received related to accommodation will be addressed confidentially. We are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we stand for: Flexibility: Enjoy unlimited vacation, subject to local regulations and business priorities. Benefit from hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave. Well‑being: Access confidential one‑to‑one support through our Employee Assistance Program, connect with our network of Wellbeing Champions and Gather Groups, and take part in monthly events and initiatives designed to help you thrive—inside and outside of work. Health & Financial Security: Medical, life and disability insurance, retirement plans, lifestyle, and other benefits.* Sustainability: Paid time off for volunteering and donation‑matching opportunities to support causes that matter to you. Inclusion: Get involved in our inclusion communities, such as Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, and Women@Finastra—open to everyone who wants to participate and contribute. Career Development: Access online learning and accredited courses through our Skills & Career Navigator tool. Recognition: Take part in our global recognition program, Finastra Celebrates, and share your voice through regular employee surveys that help shape our culture and ways of working. *Specific benefits may vary by location. At Finastra, each individual is unique—bringing their own ideas, perspectives, cultural backgrounds, and experiences. We learn from one another, value what makes us different, and create an environment where everyone feels included, supported, and able to be their authentic selves. Be unique. Be exceptional. Help us make a difference at Finastra. Finastra is committed to providing accessible employment practices that are in compliance with the Accessibility for Ontarians with Disabilities Act (AODA). We will accommodate applicants' needs upon request, throughout all stages of the recruitment process. Please inform us of the accommodation(s) that you may require. Information received related to accommodation will be addressed confidentially.

The SOC Analyst is responsible for monitoring, investigating, and responding to cybersecurity threats across global cloud and on-premises environments. They will also perform threat triage, manage incident response activities, and contribute to the optimization of security tools and operational playbooks.

Candidates must have hands-on experience in a SOC or security monitoring environment and proficiency with SIEM platforms like Sentinel or Splunk. A bachelor's degree in a related field is required, and professional cybersecurity certifications are preferred.

• Unlimited vacation • Medical insurance • Life insurance • Disability insurance • Retirement plans • Employee assistance program • Volunteering time off • Donation matching • Online learning access

Identified from the job description. Confirm important requirements above.

• Cybersecurity
• Security operations center
• SIEM
• Microsoft Sentinel
• Splunk
• Incident response
• Threat analysis
• Network security
• Cloud security
• TCP/IP
• DNS
• HTTP
• SMTP
• Troubleshooting
• Automation
• Security Tools
• Continuous Development
• Cyber Operations
• Financial Technology (FinTech)
• Cyber Threat Intelligence
• OpenText Enterprise Security Manager (ArcSight)
• Threat Detection
• Time Off Management
• IBM QRadar (SIEM Software)
• Escalation Management
• Employee Surveys
• Artificial Intelligence
• Certified Information Systems Security Professional
• Communication
• Computer Science
• Information Technology
• Cyber Security
• Operating Systems
• Incident Response
• Employee Assistance Programs
• Financial Services
• GIAC Certified Intrusion Analyst
• GIAC Certifications
• GIAC Security Essentials Certification (GSEC)
• Leadership
• Problem Solving
• SMTP (Simple Mail Transfer Protocol)
• Operations
• Security Information And Event Management (SIEM)
• Threat Management
• Triage
• Troubleshooting (Problem Solving)
• Process Improvement
• Collaboration
• Business Priorities

• Security & Safety
• Technology
• Software
• Finance & Accounting
• Security Operations Center Analyst
• Database and Network Professionals Not Elsewhere Classified
• Software Quality Assurance Analysts and Testers

Minimum education

Professional degree

Minimum experience

2+ years

Posting language

English

Working hours

40 hours per week

Office presence

2 days per week