Closed listing
Cyber Security Analyst
- Canada
Full-time
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Full-time
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Key Responsibilities
- Monitor security events, alerts, and logs using SIEM platforms.
- Investigate and triage potential security incidents.
- Perform initial incident response, containment, and escalation.
- Analyze security logs from endpoints, servers, firewalls, applications, and network devices.
- Conduct threat hunting and identify indicators of compromise (IOCs).
- Perform vulnerability assessments and track remediation activities.
- Monitor endpoint security using EDR/XDR solutions.
- Investigate phishing emails, malware alerts, suspicious activities, and unauthorized access attempts.
- Support identity and access management activities, including access reviews and privileged-access monitoring.
- Maintain security documentation, incident reports, and investigation records.
- Assist with security audits, compliance requirements, and risk assessments.
- Collaborate with IT, networking, cloud, development, and infrastructure teams to resolve security issues.
- Stay informed about emerging threats, vulnerabilities, and security best practices.
Required Skills
- Understanding of networking concepts: TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and common protocols.
- Knowledge of Windows and Linux operating systems.
- Experience with security monitoring and SIEM tools.
- Understanding of incident response and security operations.
- Knowledge of common cyber threats such as phishing, malware, ransomware, credential attacks, and web attacks.
- Familiarity with vulnerability management and security assessment processes.
- Basic knowledge of MITRE ATT&CK, IOC analysis, and threat intelligence.
- Strong analytical and problem-solving skills.
- Good documentation and communication skills.
Preferred Skills
- Experience with Microsoft Sentinel, Splunk, IBM QRadar, or similar SIEM platforms.
- Experience with Microsoft Defender, CrowdStrike, or other EDR/XDR platforms.
- Knowledge of vulnerability tools such as Nessus or Qualys.
- Familiarity with AWS/Azure/GCP security.
- Basic scripting knowledge in Python, PowerShell, or Bash.
- Knowledge of security frameworks such as NIST CSF, ISO 27001, and CIS Controls.
- Security certifications such as Security+, CySA+, CEH, or equivalent.
More about this job
Responsibilities
Monitor and investigate security alerts, logs, and potential incidents; perform initial response, containment, escalation, threat hunting, and vulnerability remediation tracking. Maintain investigation documentation and support audits, compliance, and risk assessments while collaborating with technical teams to resolve security issues.
Requirements
Requires knowledge of networking, Windows and Linux, SIEM monitoring, incident response, common cyber threats, vulnerability management, and basic threat intelligence concepts. Strong analytical, problem-solving, documentation, and communication skills are expected; experience with named SIEM and EDR/XDR tools, cloud security, scripting, frameworks, or certifications is preferred.
Skills
- SIEM Monitoring
- Incident Response
- Security Log Analysis
- Threat Hunting
- IOC Analysis
- Vulnerability Management
- EDR/XDR
- Network Security
- Windows
- Linux
- Identity and Access Management
- Threat Intelligence
- MITRE ATT&CK
- Python
- PowerShell
- Bash
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
Keywords
- SIEM
- Microsoft Sentinel
- Splunk
- IBM QRadar
- Microsoft Defender
- CrowdStrike
- EDR
- XDR
- Nessus
- Qualys
- AWS
- Azure
- GCP
- TCP/IP
- DNS
- HTTP/HTTPS
- VPN
- Firewalls
- Windows
- Linux
- Incident Response
- Threat Hunting
- Indicators of Compromise
- MITRE ATT&CK
- Threat Intelligence
- Python
- PowerShell
- Bash
- NIST CSF
- ISO 27001