IT Cyber Security Analyst

Wepoint est larchitecte des grandes transformations des entreprises et des acteurs publics.
En près de 20 ans nous sommes devenus lun des acteurs majeurs de la transformation numérique et employons 3 500 collaborateurs en Europe en Tunisie et en Amérique du Nord ainsi quen Asie Pacifique.

The L3 Production Cybersecurity Analyst position will provide security expertise to the 24/7 Security Operations Center (SOC). The main objective of this position is to contribute to the coordination and reporting of cyber incidents affecting the banks critical assets by detecting preventing and responding to cyber threats targeting our groups infrastructure. This role provides essential support to the company-wide cybersecurity program through regional partnerships with our various business lines and externally with our customers partners and regulators.
As a Cybersecurity Analyst you are not only responsible for real-time monitoring analysis and resolution of identified security incidents but also for the development and continuous improvement of the capabilities of the 24/7 SOC the first line of defense for identifying potential information security incidents.

Provide analysis and monitoring of security log trends from numerous heterogeneous security devices;
Provide incident response (IR) support or escalate when analysis confirms an actionable incident. Provide threat and vulnerability analysis and security consulting services;
Analyze and respond to previously undisclosed software and hardware vulnerabilities;
Investigate document and report on information security issues and emerging trends;
Conduct threat hunting activities to identify potential adversaries present in the network;
Perform analysis on compromised systems to identify the extent and nature of the compromise and provide remediation recommendations;
Perform tasks independently with a certain level of supervision;
Monitor internal bank sources that may indicate security incidents health alerts from monitored solutions and requests for information (real-time channels or dashboards periodic reports email inboxes helpdesk or other ticketing systems phone calls chat sessions);
Follow incident-specific procedures to triage potential incidents validate and determine necessary mitigation measures and keep these procedures up to date;
Maintain in-depth knowledge of the banks technology architecture known weaknesses the architecture of security solutions used for monitoring imminent and general threats identified by customer threat intelligence and recent incidents;
Continuously improve the service by identifying and correcting gaps (analysis procedures playbooks client network models) adjusting false positives and identifying and recommending new tools content countermeasures or scripts;
Serve as a recognized expert in at least one security-related field (e.g. a specific anti-malware solution Python programming etc.);
Comply with internal operational security rules and other policies.
Carry out small ad hoc tasks/projects that may be assigned to you.
SIEM ELK IDS/IPS network and host firewalls data leak prevention (DLP);
Direct experience with antivirus software endpoint detection and response (EDR) solutions firewalls and content filtering;
Demonstrable experience or knowledge in incident response log analysis and PCAP file analysis;
Good knowledge of network fundamentals e.g. Good understanding of threat actors methods of attack against a network: phishing port scans web application attacks DDoS lateral movement;
Knowledge of Windows and/or Linux operating systems and investigation methods to detect signs of compromise;
Excellent communication skills in English are required as the position involves communicating with stakeholders outside Quebec.

Minimum de 3 semaines de vacances dès la première année;
Flexibilité de télétravail complète : Un bureau chaleureux lumineux et accueillant qui vous offre : des fruits frais du café des breuvages des repas occasionnels etc.
Budget de matériel informatique annuel
Formation et certifications Apprentissage en-ligne ou en présentiel Academy Wepoint etc.
Une communauté internationale dexperts prêts à partager leurs connaissances;