Security Analyst - Information Technology

About the Role

This Security Analyst position, based in Canada and offered remotely, focuses on enhancing cybersecurity operations within a sizable, technology-focused organization. The role is designed for professionals committed to protecting critical systems by addressing security incidents, performing threat analysis, and advancing security measures.

Working closely with seasoned cybersecurity experts, the analyst will contribute to strengthening organizational resilience and managing risks effectively. The role encompasses hands-on involvement in security operations, vulnerability management, threat intelligence assessment, and continuous process improvements. Collaboration with both technical teams and business units is essential to identify vulnerabilities and implement robust security solutions.

Key Responsibilities

• Respond promptly to cybersecurity threats, alerts, and incidents, overseeing detection, investigation, escalation, and remediation phases.
• Engage in vulnerability management activities, including scanning, analyzing, prioritizing, and assisting with remediation efforts.
• Analyze threat intelligence and public vulnerability disclosures to determine their relevance and impact, guiding necessary actions.
• Support security assessments, audits, and remediation projects involving systems and applications.
• Contribute to the development and refinement of security policies, standards, procedures, and operational processes.
• Assist with phishing simulation programs, security awareness campaigns, and cybersecurity training initiatives.
• Validate and fine-tune security controls across identity management, endpoints, and cloud platforms.
• Help implement and enhance security tools and technological capabilities in operational frameworks.
• Work collaboratively with internal technical and business stakeholders to evaluate risks and propose mitigation strategies.
• Document investigative findings and recommendations clearly for technical and non-technical audiences.

Required Qualifications and Skills

• Diploma or degree in a related technical field from an accredited institution.
• Between three and five years of experience in IT security and governance, preferably in medium to large enterprises.
• Practical skills in threat detection, vulnerability management, security monitoring, and incident response.
• Familiarity with cybersecurity frameworks and best practices, including NIST standards.
• Knowledge of cloud security principles and Microsoft 365 environments.
• Experience using security and network monitoring tools for threat analysis.
• Understanding of security operations across various platforms like endpoints, networks, cloud, and identity systems.
• Certifications such as Security+, SC-200, CISSP, CISM, or OSCP are advantageous.
• Strong analytical and problem-solving skills with effective risk evaluation capabilities.
• Excellent communication skills for conveying technical concepts to diverse stakeholders.
• Ability to adapt to evolving priorities, adhere to structured methodologies, and exercise sound judgment.

Benefits

• Work fully remotely from anywhere in Canada.
• Competitive salary aligned with experience and qualifications.
• Engage in impactful cybersecurity projects that safeguard vital services and data.
• Collaborate with experienced security professionals and cross-disciplinary teams.
• Access opportunities for professional advancement in cybersecurity.
• Participate in an inclusive workplace culture valuing diversity and employee contributions.
• Contribute to continuous improvement and innovative security solutions.

Additional Information

This role is managed on behalf of a partner organization that handles all applications and subsequent processes. The position offers an opportunity to develop in a dynamic cybersecurity environment, leveraging AI-assisted candidate matching to ensure a fair and efficient selection process. Final hiring decisions rest with the partner company. Candidates' data will be processed according to privacy laws, including GDPR, with transparency on AI usage in recruitment processes.