Senior Analyst, Cyber Security

Role overview

Responsibilities

• Act as senior SOC escalation point and support complex or high-severity incident response.
• Implement and monitor security controls across on-premises, hybrid, and cloud environments.
• Help ensure business applications, systems, and services are implemented securely.
• Conduct technical security reviews and establish security configuration baselines.
• Implement security monitoring, detection, and response tools, including cloud-native tools, and recommend improvements.
• Maintain SOC procedures, runbooks, and documentation.
• Perform advanced investigations, threat hunting, and technical analysis across enterprise and cloud environments.
• Improve detection coverage, response processes, SOC tools, analytics, and workflows.
• Mentor and support Cyber Security Analysts and provide technical quality assurance.
• Provide on-call incident coverage outside regular business hours, including evenings and weekends, as required.

Work arrangement

• Hybrid arrangement requiring onsite presence in Ottawa three to five days per week, depending on meetings and other activities.

Qualifications and experience

• English and French proficiency is required at hire; the stated profile is intermediate reading, writing, and oral proficiency.
• A related university degree in cybersecurity, information technology, computer science, or equivalent experience is required.
• At least seven years of related business experience is required; cybersecurity operations, SOC, or incident response experience is preferred.
• Experience operating security technologies in enterprise and cloud environments is required.
• Proven incident response, threat management, investigation, root-cause analysis, and remediation coordination experience is required.
• Hands-on enterprise security operations experience includes SIEM/SOAR, EDR/XDR, IDS/IPS, vulnerability management, identity and access management, network security, and email/web security.
• Knowledge of ITSG-33, GC Cyber Controls, PCI, and privacy legislation is requested.

Selection process