Closed listing
Senior Analyst – Security Operations, Information & Cybersecurity : Toronto, ON : FTE
- Toronto, ON, Canada
Full-time
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Full-time
- Closing date
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Role: Senior Analyst – Security Operations, Information & Cybersecurity
Location: Toronto, ON
Work Model: Onsite
Experience: 5+ Years
Job Summary
We are seeking a Senior Analyst – Security Operations, Information & Cybersecurity to join a dynamic cybersecurity team responsible for security operations, incident response, threat intelligence, vulnerability management, security controls, and risk management.
The ideal candidate will have strong hands-on experience with SIEM, EDR, DLP, firewalls, threat intelligence, security orchestration/automation, vulnerability management, and cloud security. This role requires someone who can investigate complex security events, coordinate incident response, identify control gaps, and provide practical security recommendations across the organization.
Core Qualifications
•
Undergraduate degree or college diploma in Cybersecurity, Information Technology, Computer Science, or a related field.
•
5+ years of relevant experience in cybersecurity, security operations, information security, or IT infrastructure security.
•
Hands-on experience managing or deploying IT infrastructure and cybersecurity technologies.
•
Relevant cybersecurity certifications such as CISSP, CISM, Security+, GIAC, CEH, or equivalent are preferred.
•
Strong technical knowledge of:
◦
SIEM and security monitoring
◦
EDR/endpoint security
◦
Firewalls and network security
◦
DLP and content filtering
◦
Threat intelligence
◦
Security orchestration and automation
◦
Vulnerability management
◦
Cloud security
•
Strong analytical, investigation, troubleshooting, and problem-solving skills.
•
Excellent written and verbal communication skills.
Key Responsibilities
•
Monitor, investigate, analyze, and document security alerts and events from SIEM, EDR, network, cloud, and other security tools.
•
Manage and coordinate the response to cybersecurity incidents in accordance with established incident response procedures and frameworks.
•
Perform security investigations using logs, alerts, threat intelligence, endpoint telemetry, and other relevant data sources.
•
Deploy, configure, administer, and maintain assigned information security controls and technologies.
•
Identify security threats, vulnerabilities, attack patterns, and emerging risks and recommend appropriate mitigation strategies.
•
Monitor third-party threat intelligence feeds, security forums, mailing lists, vulnerability disclosures, exploits, and threat actor activity.
•
Assess the relevance and potential impact of emerging vulnerabilities and threats to the organization.
•
Produce threat intelligence reports, security assessments, and operational security briefings to support security planning and decision-making.
•
Analyze security incident and trend data to identify systemic operational risks and recurring security issues.
•
Support the development and implementation of solutions to reduce identified security risks.
•
Conduct information security risk assessments, document findings in the risk register, and track mitigating actions through completion.
•
Support the remediation and closure of audit findings, control deficiencies, and self-identified security gaps.
•
Collect and analyze security metrics and operational data for information security dashboards, KPIs, and management reporting.
•
Participate in the administration and continuous improvement of information security governance, policies, standards, and procedures.
•
Collaborate with infrastructure, cloud, application, and business teams to resolve complex security issues.
•
Act as a security advisor to various departments, providing guidance on cybersecurity risks, controls, vulnerabilities, and remediation strategies.
•
Contribute to continuous improvement of security operations, monitoring, incident response, and security controls.
Core Technical Skills
SIEM | EDR | Incident Response | Threat Intelligence | Vulnerability Management | Firewalls | DLP | Security Automation/SOAR | Cloud Security | Security Monitoring | Risk Management | Security Governance
Key Competencies
•
Security Operations & Incident Response
•
Threat Detection & Investigation
•
Threat Intelligence & Vulnerability Analysis
•
Cybersecurity Risk & Control Management
•
Security Monitoring & Reporting
•
Governance, Audit & Compliance
•
Stakeholder Management & Security Advisory
More about this job
Responsibilities
Monitor and investigate security alerts, coordinate incident response, manage security controls, and assess threats, vulnerabilities, and organizational risks. Produce threat intelligence and security reporting, support remediation and governance activities, and advise teams on security controls and risk reduction.
Requirements
Requires an undergraduate degree or college diploma in cybersecurity, information technology, computer science, or a related field, plus at least five years of relevant cybersecurity or security operations experience. Candidates should have hands-on experience with security technologies such as SIEM, EDR, firewalls, DLP, threat intelligence, automation, vulnerability management, and cloud security; relevant certifications are preferred.
Skills
- SIEM
- EDR
- Incident Response
- Threat Intelligence
- Vulnerability Management
- Firewalls
- Data Loss Prevention
- Security Automation
- Cloud Security
- Security Monitoring
- Risk Management
- Security Governance
- Threat Detection
- Security Investigations
- Audit and Compliance
- Stakeholder Management
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Management & Leadership
Keywords
- SIEM
- EDR
- Incident Response
- Threat Intelligence
- Vulnerability Management
- Firewalls
- Data Loss Prevention
- Security Orchestration and Automation
- Cloud Security
- Security Monitoring
- Security Operations
- Endpoint Security
- Network Security
- Content Filtering
- Security Investigations
- Threat Detection
- Risk Management
- Risk Register
- Security Governance
- Security Controls
- Audit Findings
- Security Metrics
- KPIs
- CISSP
- CISM
- Security+
- GIAC
- CEH
- Threat Actor Activity
- Security Assessments