Security Analyst, Threat Detection and Response

Security Analyst, Threat Detection and Response

Technology and Project Services

Competition 26:16

Centrally located in downtown Vancouver, the British Columbia Securities Commission (BCSC) strives to make the investment markets benefit the public – enabling people to achieve their financial goals, enterprises to grow, and British Columbia to thrive. Through smart rules, diligent oversight, strong enforcement, and reliable guidance, we act as guardians of the province’s investment marketplace, striving to make BC a place where people can invest with confidence and companies can flourish. We are an independent agency accountable to the provincial legislature and the public through the Minister of Finance.

Position Overview

Reporting to the Chief Information Security Officer, the Security Analyst, Threat Detection and Response is responsible for protecting the organization’s information systems through proactive monitoring, incident response, and continuous improvement of security controls. This role leads the identification, analysis, and remediation of cyber threats while managing key security functions such as vulnerability management, SIEM monitoring, access controls, and compliance with security policies and standards. Operating across both cloud and on-premises environments, the position ensures security best practices are embedded in system design, configuration, and daily operations. This role supports audit readiness, risk management, and the enhancement of security frameworks, while promoting cybersecurity awareness through training and clear communication of risks, and collaborating closely with technical teams, leadership, and service providers to strengthen the organization’s overall security posture.

Main Responsibilities

Cyber Security Operations

• Continuously improve cyber incident response, including impact analysis, root cause identification, and remediation planning.
• Operate and enhance core security controls, including vulnerability management, SIEM monitoring, and access controls, ensuring effectiveness and reliability.
• Support security governance by maintaining policies, procedures, audit readiness, and embedding lessons learned into controls and processes.

Security Awareness and Risk Communication

• Deliver and maintain a comprehensive cybersecurity awareness program, including training, phishing simulations, and policy communications.
• Translate technical security risks into clear, business-friendly language for diverse audiences, including leadership.
• Monitor the evolving threat landscape and communicate relevant risks and incidents to management while fostering a culture of security awareness.

Secure Cloud and Infrastructure Operations

• Implement and maintain secure Azure and Microsoft 365 environments, ensuring best practices in identity, access, and configuration management.
• Support and harden on-premises infrastructure, including server configuration, validation, and ongoing security maintenance.
• Maintain accurate technical documentation, including network diagrams and operational procedures aligned with security standards.

Projects and Operational Readiness

• Contribute to infrastructure and security projects, ensuring alignment with operational and security standards.
• Validate that security and operational acceptance criteria are met prior to production deployments.
• Develop and execute security-focused implementation plans in collaboration with senior security leadership.

Other Duties

• Participate in after-hours on-call support for security and infrastructure incidents.
• Perform additional duties as required in support of security and operational objectives.

Qualifications

• Technical diploma or degree in Computer Science, Management Information Systems
• Three to Five (3–5) years of recent related experience in cyber security operations and systems and cloud operations
• Or an equivalent combination of education and experience
• Relevant certifications such as CISSP, CISM, Security+, Azure Fundamentals (AZ-900), Azure Administrator (AZ-104), or ITIL are considered an asset.

What we Offer

Extensive benefit package including a defined benefit pension plan, medical and dental coverage, Wellness and Health Spending Account benefits, and four weeks of annual vacation

• Competitive compensation package
• Hybrid work model
• Beautiful downtown office
• Work life balance
• Professional development opportunities
• A collaborative, progressive, and professionally diverse team to work with

Salary Range

The salary range for this position is $86,097 (minimum) - $111,814 (midpoint) - $137,531 (maximum).

The starting salary for this position will be determined considering the successful candidate’s relevant experience and education, salaries of other employees in the same salary range, market conditions and other relevant factors.

Starting salaries are normally below the salary band midpoint.

Application Details

Please visit our Careers page to submit your cover letter and resume for this position, quoting competition 26:16 by June 8, 2026

The BC Securities Commission embraces diversity and is committed to building an inclusive workforce that celebrates the richness of our community.

We aim to ensure every job applicant is treated fairly and with respect and encourage applications from all candidates, including those with diverse abilities. We welcome you to inform us in confidence by emailing ***email_hidden*** if you may require any support or accommodations during the application process, including disability accommodation, in order to participate fully in our recruitment experience.

Candidates must be authorized to work in Canada. Investment restrictions apply.