Cybersecurity Analyst

at  CANARIE

Working within CanSSOC – a federated team of cybersecurity analysts across Canada – the Cybersecurity Analyst will be accountable for monitoring and delivering timely, relevant threat intelligence, investigating events and incidents, and providing technical guidance and support to partners within the Research and Education community.
This is a full-time, permanent position that reports to CANARIE’s Director, Cybersecurity Operations.

EDUCATION AND EXPERIENCE

• College diploma or university degree or a suitable combination of education, experience, or other relevant training
• Minimum 5 years of progressive IT security experience, with exposure to Security Operations Center (SOC) environment
• Experience documenting cybersecurity processes, procedures, and playbooks
• Experience in identifying and containing security incidents
• Experience automating investigations and processes using basic scripting and tooling
• (ISC)2, CompTIA, GIAC, or other relevant cybersecurity certifications are desirable

SKILLS

• Knowledge and experience with information system architecture and security controls (i.e., firewalls, operating systems configurations, databases, information security policies, and procedures)
• Knowledge of application security best practices, tools, and methodologies
• Demonstrated understanding of patch and vulnerability management
• Demonstrated ability to gain trust and credibility from internal and external stakeholders
• Understanding of cybersecurity risks to the academic sector is desirable

• Collaborate with partners to monitor and analyze security events and incidents, providing incident response and risk management support, proposing mitigations, and supporting user awareness
• Identify and prioritize vulnerabilities and collaborate with stakeholders to ensure they are understood and triaged effectively
• Review threat intelligence to provide effective threat reporting to partner organizations
• Review events and alerts from various security platforms and provide analysis, trends, and insights
• Develop training material, procedures, and general documentation related to daily tasks and tools
• Onboard new academic institutions as members to relevant platforms and initiatives, conducting health-checks of systems, and proactively alerting customers to operational issues
• Provide recommendations for future projects, security tools, and process improvements
• Travel may occasionally be required
• Other related duties and responsibilities, as required