Jobs at CDW

Provides second-level cybersecurity incident response and client support within a 24/7 managed detection and response operation. Monitors, investigates, remediates, and resolves cyber incidents; escalates complex issues; performs root-cause analysis and ticket quality reviews; and supports SLA adherence. The role improves SOC analytics and processes, mentors junior analysts, participates in use-case and SOP development, supports customer activations, and pursues relevant security certifications.

Provides managed detection and response services using Microsoft Sentinel and Defender. Responsibilities include deploying, tuning, and optimizing SIEM platforms; onboarding and supporting customers; serving as a technical escalation point; conducting service reviews and quality assurance; improving processes, SOPs, and automation; developing security use cases and reports; mentoring teams; delivering training; and performing on-call coverage.

Monitors and investigates security alerts across SIEM, SOAR, EDR/XDR, firewall, and threat-intelligence platforms. Performs incident triage, analysis, response, escalation, malware and vulnerability management, and security-system troubleshooting. Supports tuning and process optimization, follows ITIL practices, documents procedures, and maintains customer security records. The role requires 24x7 availability, 12-hour shifts, ongoing threat awareness, and eligibility for a Government of Canada Level 2 Secret clearance.

Provides first-level managed security services support for network security clients in a 24/7 operations environment. Monitors and resolves security requests, escalates complex issues, communicates incident updates, tracks SLA breaches and service trends, and maintains knowledge-base documentation. The role requires firewall administration experience with Palo Alto and Check Point, familiarity with AWS, Azure, and GCP, participation in firewall projects, ongoing training, and willingness to work weekends, holidays, overtime, and rotating coverage.