Security SOC Analyst

Remote from: Canada
Salary, yearly, CAD: 70,000 - 90,000
Department: Technical Support
Employment type: Full Time,
Job posted: 21 May 2026
Apply before: 21 Jun 2026
Experience level: Midweight
Views / Applies: 15 / 2

About company

About Employment Hero

Fully-autonomous HR, payroll, and workforce management solution for SMEs to recruit, pay and manage their workforce.

Computer Software
2014

Actively Hiring

AI Summary

Employment Hero is seeking a Security SOC Analyst to join their security team, acting as the front line of defense for over 2 million users. The role involves triaging SIEM alerts, responding to incidents, and collaborating with an AI Analyst to automate manual tasks. Key responsibilities include monitoring security tools like Crowdstrike and Netskope, managing identity and access, and performing threat intelligence. The ideal candidate has 2-3 years of SOC experience, a self-starter mentality, and a passion for technical challenges. The position offers remote work, ESOP, and a range of benefits.

Job Complexity

Easy Hard

AI Insight The role requires 2-3 years of SOC experience and familiarity with multiple security tools, but it is not a senior position. The difficulty is moderate due to the need for technical knowledge and the ability to work independently in a remote environment.

Salary Analysis

AI Insight The offered salary range of CAD $70,000-$90,000 (approx. USD $52,000-$67,000) is below the US market median for SOC Analysts, which typically ranges from $70,000 to $100,000. However, the role includes ESOP and other benefits that may compensate for the lower base salary.

Key Skills

SOC Incident Response SIEM EDR Cloud Security Identity and Access Management Threat Intelligence AI Automation Netskope Crowdstrike

Cover Letter Sample

I am writing to express my strong interest in the Security SOC Analyst position at Employment Hero. With 2+ years of experience in SOC operations and a deep passion for cybersecurity, I am excited about the opportunity to protect your platform's 2 million users.

In my previous role, I successfully triaged and responded to security incidents using SIEM and EDR tools, reducing response times by 30%. I am particularly drawn to Employment Hero's AI-first approach and am eager to collaborate with your AI Analyst to enhance automation.

I am a self-starter who thrives in remote environments and continuously upskills through CTF challenges and personal labs. I am confident that my technical expertise and alignment with your values make me a strong fit for this role.

Thank you for considering my application. I look forward to the possibility of contributing to Employment Hero's mission.

Possible Interview Questions

Describe a time you handled a security incident from detection to resolution. What tools did you use?

In my previous role, I detected a phishing campaign via SIEM alerts. I used Crowdstrike to isolate affected endpoints, analyzed email headers with Abnormal Security, and blocked malicious domains. I then coordinated with IT to reset compromised credentials and documented the incident for post-mortem.

How would you integrate an AI Analyst into SOC workflows?

I would start by identifying repetitive tasks like alert triage and log correlation. The AI Analyst could be trained on historical incidents to automate initial classification. I would work with the team to define rules for escalation and continuously refine the model based on feedback.

Explain a complex security concept to a non-technical stakeholder.

For example, explaining zero-trust: Instead of trusting anyone inside the network, we verify every access request. Imagine a building where even employees need to show ID to enter each room. This minimizes damage if a credential is stolen.

How do you stay current with evolving threats and technologies?

I participate in CTF competitions like Hack The Box, follow threat intelligence feeds (e.g., AlienVault OTX), and experiment with new tools in a home lab. I also attend webinars and read security blogs like Krebs on Security.

What steps would you take to improve SOC efficiency?

I would implement playbooks for common incidents, leverage automation for low-risk alerts, and ensure 24/7 coverage via follow-the-sun shifts. Regularly reviewing metrics like time-to-detect and time-to-respond helps identify bottlenecks.

Who we are

Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution. Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally. We now service over 300,000 businesses and more than 2 million employees.

The EH Way

At Employment Hero, we’re proud of our unique DNA, which we call The EH Way.

We are Mission First: Everything we do is driven by our Mission.
We are Remote First: We champion a remote environment with a preference for asynchronous communication.
We are AI First: AI is not just a tool; it’s a fundamental part of how we operate and scale.
We are Apolitical: We do not take a position on political or social topics.
We Live by Our Values: We role model our values 100% of the time.
We Expect High Performance: We set a high standard; there is no room for average performance here.

This role:

As our Security SOC Analyst, you’ll be working with the wider security team to act as the front line of our security defense. You will be instrumental in protecting our community of 2 million+ users, ensuring our vector to 10 million users remains secure and unimpeded.

Your key focus areas will be:

Achieving 24/7 “Follow the Sun” coverage by bridging the gap between our AU and CA teams.
Maintaining a high-velocity response rate to SOC alerts and internal security queries.
Integrating and improving our “AI Analyst” to automate manual triage.

This will include:

Triage & Incident Response: Monitoring SIEM alerts and responding to events in real-time.
Security Service Delivery: Resolving internal security tickets and troubleshooting tools like Netskope, Crowdstrike, and Abnormal Security.
AI Collaboration: Working hand-in-hand with our AI Analyst to improve its accuracy and automation capabilities.
Identity & Access Management: Configuring Google Workspace (IDP/SSO/Conditional Access) and MDMs (Intune, Jamf, Kandji).
Threat Intelligence: Monitoring dark web mentions and compromised credentials.
Vulnerability Support: Performing regular scans and providing remediation guidance.

Who you are

To thrive at Employment Hero, you’ll need to embody The EH Way—operating with focus, agility, and an obsession with impact. For this role, you’ll also bring:

A “Self-Starter” Mentality: You are a high-performer who takes initiative to investigate challenges independently before seeking guidance. You possess the technical aptitude and confidence to step into complex scenarios and deliver outsized impact as you grow into the role.
Technical Passion: You likely run personal labs, participate in CTFs/Hack The Box, or have personal AI projects.
Operational Experience: 2–3 years in a SOC, NOC, or technical Helpdesk environment.
Tooling Knowledge: Familiarity with EDR, SIEM, and Cloud Security.
Ambition: You aren’t satisfied with a “passing grade”; you strive for excellence.
Reliability: The ability to own your impact in a fully remote, asynchronous environment.

What we can offer

You will work remotely, with the flexibility to own your time and impact
You will access cutting-edge tools to amplify your work, knowledge and outputs
You’ll surround yourself with ambitious, outcome-driven colleagues who challenge you to do the best work of your life
You’ll own ESOP (employee share options) in one of the world’s fastest-growing tech companies
You’ll also have access to a wide range of benefits that includes – a very generous parental leave policy, subsidised egg freezing (so you can make the choice that’s right for you, on your terms), a WFH office expense budget, and outstanding learning & development opportunities
Annual Global Gathering – so far we’ve been to Thailand, Vietnam, Bali, Dubai and are excited to meet in Gold Coast in Australia in September 2026

We’re AI-first, so you may meet some of our AI tools early in the process. They help us cut the noise, surface great talent fast and make sure every candidate gets a fair, consistent experience.

We verify candidate identity and location as part of our hiring process.

At Employment Hero, we are committed to safeguarding the privacy of your application data. To understand how we do so, you can read our Applicant Privacy Policy here employmenthero.com/legals/applicant-policy/

Employment Hero celebrates diverse perspectives and experiences, we invite people of all backgrounds and identities to apply for this position.

Apply now >