Production CSIRT Analyst LII
- Montreal, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- Minimum 3 years of experience in a related role.
- Posting language
- English
- Posted
Original job description
The position at a glance
The Production CSIRT Analyst Level II provides essential security expertise to the 24×7 Security Operation Center to protect the bank’s critical assets. This role supports the firm-wide cybersecurity program by detecting, preventing, and responding to cyber threats against the group’s infrastructure. Through partnerships with diverse lines of business and external stakeholders, the position ensures the continuous improvement of the bank’s first line of defense.
In detail
- Monitor real-time channels, dashboards, and ticketing systems to identify potential security incidents and health alerts.
- Perform triage of potential security incidents by following specific procedures to validate threats and determine necessary mitigation steps.
- Conduct forensics analysis on compromised systems to identify the extent of a compromise and provide remediation recommendations.
- Execute threat hunting activities to identify potential adversaries within the network and enhance defensive capabilities.
- Investigate and document emerging security trends by reporting on information security issues to maintain institutional awareness.
- Develop and validate security use-cases to improve the detection accuracy of the Security Operation Center.
- Provide Incident Response support by escalating actionable incidents and delivering security advisory services to stakeholders.
- Analyze software and hardware vulnerabilities to respond to undisclosed threats and minimize organizational risk.
- Integrate and share intelligence with other analysts and teams to foster a collaborative security environment.
- Maintain accurate incident documentation within the case management system to ensure thorough record-keeping and compliance.
- Bachelor’s degree in Computer Science or a related field.
- Certifications: GCFA, GCIH, OSCP, or similar.
- The knowledge of English is required.*
- Minimum 3 years of experience in a related role.
- Scripting knowledge for automating security tasks and investigations.
- Reasoning and documentation skills when investigating alerts and presenting findings to peer and executive level colleagues.
- Collaborative approach when working with interconnecting Cyber Security teams such as Forensics, Threat Intelligence, and Penetration Testing.
- LLM utilization to accelerate investigations, automate report drafting, and extract insights from unstructured data.
- Technical proficiency in SIEM, ELK, IDS/IPS, firewalls, and Data Leakage Protection (DLP) for effective monitoring.
- Endpoint security expertise using anti-virus and Endpoint Detection and Response (EDR) tools.
- Incident response and log analysis capabilities for identifying and mitigating active threats.
- Network fundamental knowledge including OSI Stack, TCP/IP, DNS, HTTP(S), and SMTP to understand communication flows.
- Understanding of threat actor methodologies, including phishing and lateral movement, to anticipate attack patterns.
- Operating system proficiency in Windows and/or Linux to investigate signs of compromise.
- Dependable management of fluctuating workloads and concurrent activities to maintain service continuity.
- Commited and supportive communication skills for effective information sharing across the organization.
- Responsible and accurate approach to maintaining rigor in all security processes.
- Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply. Professional working proficiency in English language is required.
What’s In It For You
Alongside a competitive compensation, we provide a comprehensive suite of flexible benefits designed to support your health, wellbeing, and long‑term success:
Health & Wellness – A menu of flexible options for you and your family, including a 24/7 telemedicine service.
Mental‑Health Support – Up to $5,000 per year for sessions with mental‑health practitioners, plus unlimited access through our Employee Assistance Program.
Financial Benefits – A defined‑contribution pension plan and a range of additional financial perks.
Paid Volunteering Days – Take time off to give back to the community.
Learning & Development – Access to high‑quality training, personal‑development programs, and clear pathways for internal career progression across our global organization.
Work‑place flexibility – Hybrid work is available for most roles. You’ll be required in the office at least three days per week, with one of those days being either a Monday or a Friday.
To find out more about our range of benefits, click here
Diversity, Equity and Inclusion (DE&I) at the heart of our commitments
BNP Paribas is committed to fostering a work environment where all employees can feel heard, valued, safe and supported, and can be their authentic selves.
BNP Paribas recruits, employs, trains, compensates and promotes regardless of race, religion, colour, national origin, sex, disability, age, and other protected status (Employment Equity Act and Canadian Human Right Act).
To learn more about our DE&I commitments, click here
About Us
BNP Paribas, the leading bank in the European Union and a major global financial institution, operates in 63 countries and has nearly 178,000 employees. Its mission is to foster a responsible, sustainable economy by financing and advising clients to the highest ethical standards while addressing environmental, regional development, and social inclusion concerns. With over 1,700 employees in Montreal and Toronto, BNP Paribas in Canada strives to develop long-term relationships with its clients by supporting their business strategies and meeting their financing and investment needs, both locally and abroad.
Our certifications and partnerships
Canada’s Top Employers for Young People 2026
Montreal’s Top Employers 2026
Canada’s Best Diversity Employers 2026
Women in Governance Platinum-Parity Certification
LinkedIn Top Companies 2024
What You Need To Know
- BNP Paribas is committed to accessibility and inclusion. During the recruitment process, accommodation needs are available at all times for candidates. You will have the chance to make a request for an accommodation during your application.
- You must be legally eligible to work in the Greater Montreal area and, if applicable, hold a valid work or study permit. Physical presence in BNP Paribas’ office(s) is an essential function of this position;
- If you are applying and accepted to a position which requires working in/for the U.S. securities industry, you will be required to provide your fingerprints and undergo additional background checks by the FBI. BNP Paribas Securities Corporation is required to maintain a supervisory program over the conduct of its Associated Persons; some of your personal data will be transmitted to the United States of America and made available to US regulators. Please reach out to BNPP for additional information; or you can also find an overview here: 3110. Supervision FINRA.org
Click here:BNP Paribas in Canada Our job offers
Protect yourself from fraudulent job postings. Emails about jobs at BNP Paribas will always come from addresses ending @bnpparibas.com @us.bnpparibas.com, @ca.bnpparibas.com, or @br.bnpparibas.com. You should be suspicious of emails regarding employment with BNP Paribas coming from any other domains and should not respond. BNP Paribas will never send payments to or request payments from candidates for positions posted by BNP Paribas.
More about this job
Responsibilities
Monitor security alerts, triage and investigate incidents, conduct forensic analysis and threat hunting, and recommend mitigation and remediation actions. Improve SOC detection capabilities, document incidents and emerging threats, share intelligence, and provide incident response support to stakeholders.
Requirements
Requires a bachelor’s degree in Computer Science or a related field, at least three years of relevant experience, and professional working proficiency in English; certifications such as GCFA, GCIH, or OSCP are cited. Candidates should have security monitoring and endpoint expertise, incident response and log analysis capabilities, scripting skills, networking and operating system knowledge, and strong investigative, documentation, and collaboration skills.
Skills
- Security Incident Monitoring
- Incident Triage
- Digital Forensics
- Threat Hunting
- Incident Response
- SIEM
- ELK
- IDS/IPS
- Firewalls
- Data Loss Prevention
- Endpoint Detection and Response
- Log Analysis
- Security Scripting
- Network Protocols
- Windows and Linux
Benefits
- Flexible Health and Wellness Benefits
- 24/7 Telemedicine
- Mental Health Support
- Employee Assistance Program
- Financial Benefits
- Paid Volunteering Days
- Training and Development
- Career Progression Opportunities
- Hybrid Work
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
Keywords
- Cybersecurity
- Security Operations Center
- CSIRT
- Security Incident Response
- Incident Triage
- Digital Forensics
- Threat Hunting
- Threat Intelligence
- SIEM
- ELK
- IDS/IPS
- Firewalls
- Data Loss Prevention
- Antivirus
- Endpoint Detection and Response
- Log Analysis
- Security Use Cases
- Vulnerability Analysis
- Security Scripting
- Large Language Models
- OSI Model
- TCP/IP
- DNS
- HTTP/HTTPS
- SMTP
- Phishing
- Lateral Movement
- Windows
- Linux
- GCFA