Senior SOC Analyst

Mark Anthony Group is one of North America's most successful privately held alcohol beverage companies. We are a leading producer and distributor of fine wine, premium Ready to Drink (RTD) products, and spirits in the Global beverage alcohol industry. We are an innovative and ambitious organization with a successful track record of building successful and disruptive brands, including the iconic
Mike’s Hard Lemonade
and
White Claw.

The Senior SOC Analyst serves as the core escalation point for complex security events, leading deep-dive investigations, containment, and forensic evidence collection across hybrid cloud, network, and endpoint environments. Beyond alert triage, this role actively improves SOC operational maturity by authoring response playbooks, engineering new detection logic aligned with frameworks like MITRE ATT&CK, and collaborating with cross-functional IT teams to drive rapid root-cause remediation.

This is a hands-on role for a cybersecurity professional with foundational experience in IT security, infrastructure, or a related technology environment. The position is ideal for someone looking to expand their expertise in security operations, incident management, and risk mitigation.

In this role, you will monitor, analyze, and investigate security alerts, support the timely resolution of incidents, and help enhance security technologies, controls, documentation, and operational processes. Working closely with the IT Security team and cross-functional technology stakeholders, you will contribute to protecting the confidentiality, integrity, and availability of the organization's systems, networks, and data. The ideal candidate is analytical, detail-oriented, and eager to grow in a collaborative, fast-paced environment while building expertise across a broad range of cybersecurity disciplines.

· Review, investigate, and coordinate the response to security alerts and incidents raised by MDR, EDR, SIEM, and related tools.

· Monitor and triage security events, escalating critical incidents in accordance with established protocols and response workflows.

· Conduct log analysis and threat hunting across endpoint, network, cloud, and identity platforms to identify potential indicators of compromise.

· Investigate, document, and report security incidents, maintaining accurate operational logs and incident records for audit and compliance purposes.

· Support identity and access management processes, including privileged access reviews, privileged identity management, and secure remote access requests.

· Monitor and maintain network security operations, including firewall rule reviews, secure remote access, and wireless security controls.

· Contribute to the implementation and ongoing improvement of the organization’s SIEM by onboarding data sources, developing detection use cases, tuning rules, and refining alert quality.

· Support security policies, standards, playbooks, procedures, and other operational documentation.

· Respond to requests for security assistance and collaborate with IT Operations, Infrastructure, Risk and Compliance, and Security Engineering teams.

· Recommend practical enhancements or integrations that improve security tools, processes, alert quality, and incident response effectiveness

· A minimum of 2-5 years of experience in cybersecurity, infrastructure, a Security Operations Centre, incident response, or related IT role.

· Post-secondary education in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.

· Working knowledge of Microsoft 365, Windows administration, and core security concepts.

· Solid understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and…