SOC Analyst, Tier III

Who We Are: Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives. Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments. As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians. Who You Will Work With: The SOC Analyst, Tier III role will report to the Leader, Security Incident Management . What You Will Do : Incident Response & Security Investigations Lead the investigation, containment, eradication, and recovery of complex cybersecurity incidents, including malware, insider threats, unauthorized access, and advanced cyberattacks. Conduct advanced threat analysis, forensic investigations, and root cause assessments to identify attack vectors and business impacts. Act as the senior escalation point for critical security incidents, coordinating response activities across technical teams, business stakeholders, and external partners. Develop incident response strategies, playbooks, and lessons learned to strengthen organizational resilience. Prepare post-incident reports, recommendations, and remediation plans. Digital Forensics & Evidence Management Perform digital forensic investigations across endpoints, servers, cloud environments, and network infrastructure. Collect, preserve, analyse, and document digital evidence in accordance with forensic and chain-of-custody standards. Produce forensic reports to support remediation efforts, compliance requirements, audits, and legal or regulatory investigations. Apply advanced forensic tools and methodologies to investigate sophisticated cyber threats. Threat Hunting & Cyber Defence ​ Lead proactive threat hunting initiatives to identify, investigate, and mitigate emerging and hidden threats. Develop and enhance security monitoring capabilities, detection use cases, and threat analytics. Leverage threat intelligence to anticipate evolving threats and strengthen defensive strategies. Drive continuous improvements to reduce cyber risk and improve threat visibility across the enterprise. Cybersecurity Strategy & Collaboration Contribute to the development and enhancement of cybersecurity policies, standards, and incident response frameworks. Provide expert cybersecurity guidance to technology, risk, legal, compliance, and business teams. Partner with internal and external stakeholders to support audits, regulatory assessments, security awareness initiatives, and operational resilience efforts. Monitor emerging threats, trends, and technologies to inform strategic security improvements. What You Bring : Extensive experience in cybersecurity incident response, digital forensics, threat hunting, and cyber threat intelligence. Deep understanding of offensive and defensive security techniques, attack methodologies, and threat actor tactics. Advanced expertise in malware analysis, memory forensics, host-based forensics, network forensics, and incident reconstruction in both on prem and cloud environments. Experience conducting complex digital forensic investigations across Windows, Linux, macOS, cloud, and enterprise environments. Strong knowledge of security monitoring, SIEM (Sentinel, Splunk, LogRythm, QRadar), endpoint detection and response (EDR) (Defender for Endpoint, Cortex, Crowdstrike), intrusion detection/prevention systems (IDS/IPS), and vulnerability management technologies. Experience in onboarding log sources and threat detection engineering (use case development and rule tuning). Strong understanding of networking concepts, TCP/IP, operating systems, application security, and infrastructure security controls. Experience leading incidents from minor to major in nature. Demonstrated ability to lead complex investigations, manage competing priorities, and coordinate cross-functional response efforts. Exceptional analytical, problem-solving, and troubleshooting capabilities with strong attention to detail. Strong written and verbal communication skills, with the ability to translate complex technical findings for technical and non-technical audiences. Proven ability to work independently, exercise sound judgement, and drive continuous improvement initiatives. Professional certifications such as GIAC, GCFA, GCIH, CISSP, CISA, or equivalent are considered an asset. Experience working within ISO-certified environments and familiarity with ITIL practices are considered assets. Willingness to participate in an after-hours on-call rotation to support critical incident response activities. Eligibility to work for Interac Corp. in Canada in a full-time capacity. What We’re Offering: The hiring range for this position is $ 90,000 – $115,000 , and you will also be eligible for our short-term incentive plan. The exact amount will depend on factors such as skills, experience, and job-related knowledge, but Interac’s commitment goes beyond compensation. Our Total Rewards package is designed to support your well-being and future, and includes: Generous vacation and wellness days to help you recharge Comprehensive employer-paid benefits coverage for peace of mind Market-leading employer-funded RRSP program to invest in your future Flexible hybrid work model for better work-life balance Access to a free and confidential 24/7 employee & family assistance program to offer support for you and your immediate family Pregnancy and parental leave top-up to support growing families Charitable donation matching with United Way to amplify your impact Why Join Us? At Interac, the impact we make, and the people who drive it, is profound. When you become part of our team, you’re joining a purpose-driven organization that’s shaping the future of digital finance in Canada. Here’s what you can expect: Investing in the Future – Help us unlock digital prosperity for all Canadians. Innovative Thinking – Collaborate on products, practices, and platforms that redefine what’s possible. Inclusive Culture – Be empowered to bring your whole self to work and realize your full potential. Inspiring Community – Work in an ecosystem where we lift each other up and rise together. Intentional Support – Enjoy flexible, supportive offerings that prioritize your total wellness. Additional Pre-Employment Requirements: To ensure the integrity of our organization, successful candidates will be required to complete background checks, which may include, Canadian Criminal Credit Check, Canadian ID Cross-Check, Public Safety Verification, 5-year Employment Verification, Education Verification, Credit Check, and Social Media Check. Equal Opportunity Employer Interac is also an equal opportunity employer committed to fostering a diverse and inclusive workplace. We believe that innovation thrives when people from different backgrounds, experiences, and perspectives come together. That’s why we are committed to providing fair and equitable employment opportunities for all individuals, without discrimination based on race, color, ancestry, ethnic origin, place of origin, citizenship, creed, sex, sexual orientation, gender identity or expression, age, marital or family status, disability, or any other characteristic protected by applicable law. If you require accommodation during any stage of the application or recruitment process, please contact us at . We will work with you to meet your needs. Please be aware that certain individuals are misusing Interac Corp.’s name and logo to promote fictitious employment opportunities. Interac Corp. never requests, solicits, or accepts any form of payment in exchange for employment. Any such offers are fraudulent and should be disregarded. Interac Corp. assumes no liability for any claims, losses, damages, expenses, or inconveniences arising from or related to these fraudulent activities. Such communications do not constitute an offer or representation by Interac Corp. or its subsidiaries and affiliates.