Teams at CDW

Provides second-level cybersecurity incident response and client support within a 24/7 managed detection and response operation. Monitors, investigates, remediates, and resolves cyber incidents; escalates complex issues; performs root-cause analysis and ticket quality reviews; and supports SLA adherence. The role improves SOC analytics and processes, mentors junior analysts, participates in use-case and SOP development, supports customer activations, and pursues relevant security certifications.

Provides managed detection and response services using Microsoft Sentinel and Defender. Responsibilities include deploying, tuning, and optimizing SIEM platforms; onboarding and supporting customers; serving as a technical escalation point; conducting service reviews and quality assurance; improving processes, SOPs, and automation; developing security use cases and reports; mentoring teams; delivering training; and performing on-call coverage.

Monitors and investigates security alerts across SIEM, SOAR, EDR/XDR, firewall, and threat-intelligence platforms. Performs incident triage, analysis, response, escalation, malware and vulnerability management, and security-system troubleshooting. Supports tuning and process optimization, follows ITIL practices, documents procedures, and maintains customer security records. The role requires 24x7 availability, 12-hour shifts, ongoing threat awareness, and eligibility for a Government of Canada Level 2 Secret clearance.