Cyber Security Analyst (L2)

As a Cyber Security Analyst (L2), you will be an integral part of our Security Operations Centre (SOC) team, on the front line of defense for our customers. Your primary role is to monitor and investigate security events from various SOC entry channels (SIEM, SOAR, tickets, email, phone), and — based on severity — to triage, respond, and escalate to senior analysts, managed service support teams, and/or the customer for further investigation and resolution. Join us and bring your talent and desire to learn, experiment, and succeed in an innovative, highly autonomous, and entrepreneurial environment. Together, we can advance Cybersecurity and your career like nowhere else.

Monitor security alerts across SOC channels and participate in security incident management and response Conduct security investigations, incident analysis, and triage, escalating to senior analysts or customers as appropriate Participate in evaluating, recommending, implementing, responding to, and troubleshooting security solutions Provide input on the tuning and optimization of security systems, processes, and procedures Follow ITIL practices regarding incident, problem, and change management Document and maintain customer build documents, security procedures, and processes Operate and investigate within managed security technologies such as SIEM, SOAR, Endpoint/Extended Detection and Response (EDR/XDR), Next Generation Firewalls (NGFW), and Cyber Threat Intelligence platforms (TIP) Stay up to date with emerging security threats, tactics, and applicable regulatory security requirements Maintain awareness of the company's information security requirements and report all information security breaches in accordance with CDW's Cybersecurity Incident Response Plan Deliver other tasks and responsibilities as discussed and agreed with your Manager What we expect of you: Must-have Degree or College Diploma in Information Security, Computer Science, Computer Engineering, or a related field, or demonstrated equivalent combination of education and experience 1+ year(s) of Security Operations Centre experience conducting security investigations Ability to obtain and maintain a Government of Canada Level 2 – Secret security clearance Solid understanding of IT fundamentals, including multiple operating systems and core system administration (Windows, Linux/Unix) Working knowledge of client-server and multi-tier web applications, relational databases, firewalls, VPNs, and endpoint protection (EDR/AV) Strong knowledge of security incident management, malware management, and vulnerability management processes Strong understanding of networking principles, including TCP/IP, WANs, LANs, and common protocols (SMTP, HTTP/S, DNS, LDAP) Familiarity with security frameworks (NIST CSF, ISO 27001) and compliance regimes (PCI-DSS, SOC II) at an operational awareness level Ability to work 12-hour shifts in an 'always on' 24x7 operation, including after-hours availability as needed Nice-to-have 2+ year(s) of Security Operations Centre experience conducting security investigations Industry certifications such as Security+, CySA+, SSCP, or other related security certifications or training Security monitoring experience with one or more SIEM technologies (Microsoft Sentinel, Splunk) and EDR/XDR platforms Familiarity with a scripting language (Python, PowerShell) for automation and custom tooling Bilingual (English and French) or multilingual CDW is committed to being an AI-fluent organization We’re looking for people who bring curiosity, a learner’s mindset, and a willingness to engage with ever-evolving technology and tools. We value adopting AI as a partner, openness to experimentation, and a shared interest in learning together on AI. Our goal is to create a culture where AI enhances—not replaces—human creativity and decision-making. You don’t need to be an expert today; what matters is your readiness to explore, adapt,