ZipRecruiter

Log In

2

Remote Microsoft Security Operations Analyst Jobs in Toronto, ON

Valorx

Marketing Operations Analyst

Toronto, ON · Remote

CA$40 - CA$50/hr

Monitor the Marketo sync error log daily and resolve field-level security issues, validation rule ... Leverage Marketo's API for bulk operations, custom integrations, and data transformations that the ...

Monks

Analyst, Media Operations

Toronto, ON · On-site +1

This is considered a remote/hybrid role, and you can expect to work with clients and other team ... Google Ads, Microsoft Ads, SA360 * Utilize internal tools and processes for day-to-day work and ...

AIM Software

Senior DevOps Engineer

Toronto, ON · Remote

Maintain strong security and high availability across all environments Collaboration Communication ... Skilled analytical and problem-solving abilities, with a proactive and results-driven mindset WHAT ...

Mercor

Cybersecurity Specialist - AI Systems

Toronto, ON · Remote

CA$1.7K - CA$2.1K/wk

Remote Role Responsibilities * Review and evaluate AI-generated outputs related to threat analysis ... Strong analytical thinking and ability to translate security operations into structured evaluation ...

next page

Showing results 1-20

All JobsMicrosoft Security Operations Analyst JobsRemote Microsoft Security Operations Analyst JobsRemote Microsoft Security Operations Analyst Jobs in Toronto, ON

Remote Microsoft Security Operations Analyst information

What is a Remote Microsoft Security Operations Analyst?

A Remote Microsoft Security Operations Analyst is a cybersecurity professional who monitors, investigates, and responds to security threats and incidents within Microsoft environments, such as Microsoft 365, Azure, and Windows systems, while working remotely. They use various security tools and platforms, like Microsoft Sentinel and Defender, to detect suspicious activity, analyze alerts, and implement security measures. Their primary goal is to protect organizational data and systems from cyber threats by identifying vulnerabilities and addressing them promptly, all while collaborating with other IT and security teams from a remote location.

How does a Remote Microsoft Security Operations Analyst typically collaborate with other IT and security team members?

As a Remote Microsoft Security Operations Analyst, you will frequently work alongside IT administrators, incident response teams, and other security professionals to monitor, investigate, and respond to security threats. Collaboration often takes place through virtual meetings, shared dashboards, and ticketing systems to ensure timely communication and efficient incident handling. You may also participate in cross-functional projects, sharing insights from security monitoring tools like Microsoft Sentinel or Defender, and help develop or refine company-wide security policies and procedures. Effective communication and documentation skills are key to ensuring alignment and maintaining a strong security posture while working remotely.

What is the difference between Remote Microsoft Security Operations Analyst vs Remote Cybersecurity Analyst?

AspectRemote Microsoft Security Operations AnalystRemote Cybersecurity Analyst
CertificationsMicrosoft Security certifications, CompTIA Security+CompTIA Security+, CISSP, CEH
Work EnvironmentPrimarily within Microsoft security tools and cloud platformsVaried environments, including multiple security tools and platforms
Industry UsageCommon in organizations using Microsoft products and cloud servicesWidespread across industries with diverse security needs
Job FocusMonitoring Microsoft security solutions, incident response, threat detectionBroader security analysis, vulnerability assessment, incident handling

The Remote Microsoft Security Operations Analyst specializes in managing Microsoft security tools and cloud environments, focusing on threat detection and incident response within Microsoft ecosystems. In contrast, the Remote Cybersecurity Analyst has a broader scope, working across various security platforms and industries. Both roles require security certifications but differ in their technical focus and work environment.

What are the key skills and qualifications needed to thrive as a Remote Microsoft Security Operations Analyst, and why are they important?

To thrive as a Remote Microsoft Security Operations Analyst, you need strong knowledge of cybersecurity principles, threat detection, incident response, and familiarity with Microsoft security solutions, often supported by a relevant degree or certifications like Microsoft Certified: Security Operations Analyst Associate. Proficiency with tools such as Microsoft Sentinel, Defender for Endpoint, and Security Information and Event Management (SIEM) systems is essential. Excellent problem-solving, analytical thinking, and clear communication are crucial soft skills for investigating threats and collaborating with distributed teams. These skills ensure effective protection of organizational assets, quick response to security incidents, and seamless remote teamwork in a dynamic security environment.

What are the most commonly searched types of Microsoft Security Operations Analyst jobs in Toronto, ON?

The most popular types of Microsoft Security Operations Analyst jobs in Toronto, ON are:

What are popular job titles related to Remote Microsoft Security Operations Analyst jobs in Toronto, ON?

For Remote Microsoft Security Operations Analyst jobs in Toronto, ON, the most frequently searched job titles are:

What job categories do people searching Remote Microsoft Security Operations Analyst jobs in Toronto, ON look for?

The top searched job categories for Remote Microsoft Security Operations Analyst jobs in Toronto, ON are:

Remote Microsoft Security Operations Analyst jobs near you
Infographic showing various Remote Microsoft Security Operations Analyst job openings in Toronto, ON as of August 2026, with employment types broken down into 67% Full Time, 30% Part Time, 1% Temporary, and 2% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution.

Principal Consultant - SIEM | Remote, CAN

Optiv Security, Inc.

Toronto, ON • On-site, Remote

Full-time

Posted 7 days ago

Job description

The Principal SIEM Consultant will be pivotal to problem definition, requirements discovery, and overall SIEM solution design, guiding teams through complex security analytics and operations engagements. This individual will drive the technical relationship with customers and partners by providing advanced SIEM architecture, implementation, integration, and operational leadership across modern platforms includingGoogle SecOps, Microsoft Sentinel, CrowdStrike NGSIEM, and Palo Alto XSIAM.

Acts as an industry leader and champion of technical excellence in Security Information and Event Management (SIEM), delivering exceptional services and support to strategic clients and setting the bar for others to aspire to.

How you'll make an impact

Work with customers to articulate business, security operations, and detection requirements and translate those needs into effective SIEM use cases, architectures, and operational models.

Architect and validate SIEM solutions to ensure the customer's risk reduction, visibility, and detection engineering objectives are met.

Lead SIEM platform design, deployment, migration, and optimization efforts across Google SecOps, Microsoft Sentinel, CrowdStrike NGSIEM, and Palo Alto XSIAM.

Assist with development of SIEM and SOC transformation engagement plans that enable customers to execute detection, response, and analytics strategies.

Rationalize SIEM, logging, and security analytics technologies against business requirements, risk posture, cost constraints, and operational maturity.

Serve as a recognized expert in SIEM architecture, log onboarding, detection engineering, UEBA, SOAR integration, and SOC operations.

Lead and mentor other consultants on complex SIEM programs, providing technical direction and quality oversight across engagements.

Able to present to large technical and executive audiences; speaks as an authority on SIEM strategy and security operations.

Confidently handles difficult technical and strategic questions, consistently gaining trust and support from client stakeholders.

Able to adapt and evolve SIEM delivery methodologies based on client maturity, platform capabilities, and operational constraints.

Maintains broad awareness of the cybersecurity, SOC, and security analytics technology landscape beyond SIEM alone.

Contributor to industry groups, thought leadership initiatives, whitepapers, or publications related to SIEM, SOC, or security operations.

What we're looking for

Bachelor's degree and approximately 10-15 years of related information security or technology consulting experience.

Approximately 8-10 years of hands-on security architecture experience with a strong focus on SIEM and security operations platforms.

Deep expertise in SIEM concepts including log collection and normalization, detection engineering, alerting strategy, content lifecycle management, SOC workflows, and integration with SOAR and EDR platforms.

Strong practical experience with one or more modern SIEM platforms such asGoogle SecOps, Microsoft Sentinel, CrowdStrike NGSIEM, and Palo Alto XSIAM.

Strong understanding of adjacent security domains including incident response, threat detection, vulnerability management, data classification, and security governance.

Understanding of the professional services business and the organizational impact of technical and delivery decisions.

Solid understanding of networking (TCP/IP, OSI model), operating systems (Windows, Linux/UNIX), cloud platforms, and modern security technologies (EDR, NDR, firewalls, IDS/IPS).

Familiarity with scripting and automation languages commonly used in SIEM environments (e.g., KQL, Python, PowerShell, YAML).

Strong understanding of regulatory and compliance requirements impacting security monitoring and log retention, including PCI DSS, GLBA, GDPR, and U.S. state privacy laws.

Proven experience integrating SIEM platforms into complex enterprise and cloud environments, including log pipelines, APIs, and security tooling ecosystems.

Willingness to travel to meet client needs.

Valid driver's license in the U.S. and a valid passport required.

The successful candidate must hold or be willing to pursue relevant certifications such as CISSP, CISM, CISA, or SIEMspecific platform certifications.

Strong interpersonal, leadership, and clientfacing skills.

Strong written and presentation skills with the ability to clearly communicate complex SIEM and SOC concepts to technical and executive audiences.

Possess a high standard of integrity and confidentiality.

  • #LI-GN1

What you can expect from Optiv

  • A company committed to our inclusive value through our Employee Resource Groups

  • Work/life balance

  • Professional training resources

  • Creative problem-solving and the ability to tackle unique, complex projects

  • Volunteer Opportunities. "Optiv Chips In" encourages employees to volunteer and engage with their teams and communities.

  • The ability and technology necessary to productively work remotely/from home (where applicable)

EEO Statement

Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.

Optiv respects your privacy.By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv's selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view ourApplicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.

Apply