Cyber Security Analyst

Job Title: Cyber Security Analyst

Contract Duration: Long term

Location: Toronto, ON

Work Arrangement: On-site

Work Schedule: 5 days per week

Job Summary

We are seeking a skilled Cyber Security Analyst to support security operations, incident response, threat detection, vulnerability management, and identity security initiatives. The ideal candidate will have experience in incident management, threat hunting, malware analysis, forensic investigation, and security incident containment. The candidate should also have a strong understanding of vulnerability assessments, risk analysis, remediation tracking, and identity and access management security controls.

Key Responsibilities

• Monitor, investigate, and respond to cybersecurity incidents in accordance with established incident management procedures.
• Perform threat hunting activities to identify potential threats, suspicious activities, and security vulnerabilities.
• Conduct malware analysis and forensic investigations to determine the scope, impact, and root cause of security incidents.
• Implement incident containment procedures and support remediation and recovery activities.
• Conduct vulnerability assessments and risk analysis to identify security weaknesses and potential threats.
• Track remediation activities, validate corrective actions, and prepare security reports.
• Analyze security events and investigate potential unauthorized access, suspicious authentication activities, and other security incidents.
• Support the implementation and management of authentication and authorization controls.
• Assess and support security controls related to Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Privileged Access Management (PAM).
• Support identity governance processes, including access reviews, access controls, and compliance with security policies.
• Collaborate with IT infrastructure, application, and security teams to resolve security issues and strengthen the organization's security posture.
• Maintain security documentation, incident records, investigation findings, and remediation reports.

Required Skills and Qualifications

• Experience in cybersecurity operations and incident management.
• Knowledge of threat hunting, malware analysis, forensic investigation, and incident containment.
• Hands-on experience conducting vulnerability assessments and risk analysis.
• Experience with remediation tracking, security reporting, and vulnerability management processes.
• Strong understanding of authentication, authorization, MFA, SSO, PAM, and identity governance.
• Knowledge of security policies, access controls, and cybersecurity best practices.
• Strong analytical, investigative, troubleshooting, and problem-solving skills.
• Excellent documentation and communication skills.