Cybersecurity Analyst II

Overview

Responsibilities

• Lead technical cybersecurity risk assessments of systems, applications, infrastructure, and projects.
• Evaluate control effectiveness to determine whether existing safeguards would realistically detect or prevent an attack.
• Evaluate third-party and vendor security posture prior to onboarding and on an ongoing basis.
• Review the security design of proposed and existing systems, networks, applications, and cloud deployments.
• Perform threat modeling to identify attack paths, trust boundary weaknesses, and exploitable design flaws.
• Own the development and lifecycle management of detection content across SIEM, EDR, and other detection platforms.
• Map and maintain detection coverage against the MITRE ATT&CK framework.
• Own the security architecture and risk posture of the organization's identity and access management environment.
• Lead or provide senior technical support for complex or high-severity cybersecurity incident investigations.
• Provide senior technical oversight of vulnerability management.
• Provide technical mentorship and coaching to junior and intermediate cybersecurity analysts.
• Contribute technical subject-matter expertise to the development and review of cybersecurity policies and standards.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent technical experience.
• Minimum 5 years of hands-on cybersecurity experience, with demonstrated depth in two or more of: technical risk assessment, security architecture review, detection engineering, or identity security.
• CISSP expected at this level, or in active progress.
• Strong communication skills, including the ability to explain complex technical attack scenarios, detection logic, and risk findings clearly.
• Strong analytical and adversarial thinking, approaching systems from an attacker's perspective.
• Sound judgment when managing competing priorities, incomplete information, and technically complex or ambiguous risk decisions.
• Discretion and professionalism in handling sensitive security, risk, and organizational information.
• Ability to work collaboratively across IT, engineering, research groups, and leadership.

Preferred Skills

• Familiarity with operational technology and industrial control system security concepts.
• Application security and secure SDLC: SAST and DAST tooling, dependency and software composition analysis, pipeline security, API security review, and providing hands-on secure coding guidance to development teams.
• Additional relevant certifications are considered assets, including CCSP, OSCP, SABSA, SC-300, or GIAC certifications such as GCIH, GCIA, GDSA, or GPEN.

Why TRIUMF

• Work at Canada's national particle accelerator centre and contribute to cybersecurity in a unique scientific research environment.
• Collaborate with a multidisciplinary community of researchers, engineers, technicians, IT professionals, and scientists.
• Grow your career through technical leadership, mentorship, continuous learning, and exposure to advanced research environments.
• Enjoy a comprehensive total rewards package, including employer-paid health and dental benefits, vision care, pension, disability benefits, wellness benefits, and generous time away.

About TRIUMF