Senior Cybersecurity Analyst

Reporting to the Director of Cybersecurity, you’ll be a senior hands-on member of the security team. You’ll own detection and response, drive vulnerability remediation, and help set the direction of the security program. You’ll also be the go-to security expert for IT and business partners across the organization.What You’ll Do
Detection & Incident Response
Triage and investigate security alerts across endpoint, network, identity and cloud environmentsLead investigations into phishing, malware, ransomware, account compromise and insider-risk eventsFind root causes and coordinate fixes with internal teams and third-party providersBuild and refine IR playbooks, runbooks and escalation pathsTake part in a shared on-call rotationThreat Hunting & Risk
Track the threat landscape and turn intelligence into improved detectionsRun proactive threat hunts using available telemetryRecommend practical, risk-based improvements to security controlsVulnerability Management & Hardening
Run vulnerability scanning and assessments across on-prem, cloud and application environmentsWork with infrastructure and application owners to prioritize fixes by riskMaintain hardening baselines aligned to CIS, NIST and ISO 27001Report on remediation progress, trends and key metricsSecurity Tooling & Automation
Manage and tune the security stack: SIEM, EDR/XDR, IDS/IPS, email security and scanning toolsAutomate repetitive work through scripting and SOAR-style workflowsEvaluate and help roll out new security technologiesGovernance & Awareness
Support compliance work across PCI DSS, ISO 27001, NIST and Canadian privacy requirementsContribute to audits, risk assessments, control documentation and policy updatesHelp raise security awareness through training and practical guidance for staffLeadership
Mentor junior analysts and share knowledge across the teamContribute to the long-term cybersecurity roadmapPartner with infrastructure, cloud, networking, privacy and business teamsWhat You Bring
5+ years of hands-on experience in security operations, incident response or threat managementA degree in Computer Science, IT, Information Security or a related field (or equivalent experience)Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryptionExperience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra IDCloud security experience in Azure, AWS or GCP;
hybrid environments area plusScripting skills in PowerShell, Python or similar are an assetExperience in a regulated or enterprise environment is an assetCertifications such as CISSP, CISM, GIAC, SC-200, AZ-500 or CEH are strongly preferredClear communication, including the ability to explain technical risk to non-technical audiencesStrong organization and judgment when juggling competing priorities
#J-18808-Ljbffr