Cyber Security Analyst
- Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Posting language
- English
- Posted
Original job description
Key Responsibilities
- Monitor security alerts, logs, and events using Security Information and Event Management (SIEM) tools.
- Identify, investigate, and respond to potential security incidents.
- Analyze suspicious activities, malware, phishing emails, and unauthorized access attempts.
- Perform vulnerability assessments and support penetration testing activities.
- Monitor network traffic and endpoint security alerts for potential threats.
- Assist with incident response, threat hunting, and root cause analysis.
- Review firewall, antivirus, endpoint detection, and intrusion detection system alerts.
- Support security audits, risk assessments, and compliance requirements.
- Maintain security documentation, incident reports, and investigation records.
- Implement security policies, procedures, and best practices.
- Collaborate with IT, network, and infrastructure teams to resolve security issues.
- Stay updated on emerging cyber threats, vulnerabilities, and attack techniques.
Required Technical Skills
- Networking: TCP/IP, DNS, DHCP, HTTP/HTTPS, VPN, ports, and protocols.
- Operating Systems: Windows and Linux fundamentals.
- SIEM Tools: Splunk, IBM QRadar, Microsoft Sentinel, or similar platforms.
- Endpoint Security: Microsoft Defender for Endpoint, CrowdStrike, or similar tools.
- Security Fundamentals: Firewalls, IDS/IPS, encryption, authentication, and access control.
- Threat Analysis: Phishing detection, malware analysis fundamentals, and log analysis.
- Vulnerability Management: Nessus, Qualys, or OpenVAS.
- Scripting: Basic Python, PowerShell, or Bash is an advantage.
- Security Frameworks: Familiarity with NIST Cybersecurity Framework, ISO 27001, and MITRE ATT&CK.
More about this job
Responsibilities
Monitor security alerts, logs, network traffic, and endpoint events; investigate suspicious activity and respond to potential incidents. Support vulnerability assessments, threat hunting, audits, compliance, security documentation, and collaboration with IT and infrastructure teams.
Requirements
Requires knowledge of networking, Windows and Linux fundamentals, SIEM and endpoint security tools, and core security concepts such as firewalls, encryption, authentication, and access control. Familiarity with vulnerability management tools, basic scripting, and frameworks including NIST Cybersecurity Framework, ISO 27001, and MITRE ATT&CK is also sought.
Skills
- SIEM Monitoring
- Incident Response
- Threat Hunting
- Log Analysis
- Network Security
- Vulnerability Assessment
- Penetration Testing
- Malware Analysis
- Phishing Detection
- Endpoint Security
- Firewall Management
- Risk Assessment
- TCP/IP
- Windows and Linux
- Python
- MITRE ATT&CK
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Software
Keywords
- SIEM
- Splunk
- IBM QRadar
- Microsoft Sentinel
- Microsoft Defender for Endpoint
- CrowdStrike
- TCP/IP
- DNS
- DHCP
- HTTP/HTTPS
- VPN
- Windows
- Linux
- Firewalls
- IDS/IPS
- Encryption
- Authentication
- Access Control
- Phishing Detection
- Malware Analysis
- Log Analysis
- Nessus
- Qualys
- OpenVAS
- Python
- PowerShell
- Bash
- NIST Cybersecurity Framework
- ISO 27001
- MITRE ATT&CK