Senior Cyber Security Analyst

Accountabilities • Security Incident Response: Serve as the primary technical contact for escalated security incidents, coordinating investigations from initial triage through containment, remediation, and post-incident reviews.

• Security Monitoring and Threat Detection: Monitor and investigate security alerts, abuse reports, and suspicious activities. Improve detection rules, correlation logic, and response workflows across SIEM, EDR, and other security platforms.

• Automation and Operational Efficiency: Develop and maintain scripts, orchestration workflows, and security automation tools to reduce repetitive tasks, streamline Level 1 operations, and improve analyst productivity.

• Threat Hunting and Detection Engineering: Conduct proactive threat hunting, validate detection capabilities, identify monitoring gaps, and continuously enhance security coverage using established frameworks and emerging threat intelligence.

• AI-Enabled Security Operations: Apply AI-assisted tools to enrich alerts, prioritize investigations, and improve analysis efficiency while monitoring evolving threats, including AI-driven attacks and the misuse of generative AI platforms.

• Vulnerability Management: Assess vulnerabilities across infrastructure, applications, cloud services, and AI-enabled solutions. Prioritize remediation efforts and validate corrective actions to reduce organizational risk.

• Security Technology and Integration: Evaluate and optimize security platforms, support the secure integration of new and existing systems, and identify technologies that improve detection, response, and operational resilience.

• Compliance and Documentation: Support audits and compliance activities by collecting evidence, documenting security controls, maintaining incident response playbooks, and assisting with remediation initiatives.

• Cross-Functional Collaboration: Work closely with engineering and other business teams to strengthen security practices, communicate risks, share expertise, and promote continuous improvement and professional development.

Requirements

• Professional Experience: At least five years of experience in security operations, incident response, cybersecurity analysis, or a closely related discipline.

• Security Monitoring Expertise: Hands-on experience with SIEM and EDR platforms, including detection engineering, alert investigation, rule tuning, and incident analysis.

• Scripting and Automation: Working knowledge of Python, PowerShell, or similar scripting languages, along with experience using SOAR platforms or security orchestration tools.

• Cloud Security: Experience monitoring and securing cloud environments, preferably across AWS, Microsoft Azure, or Google Cloud Platform.

• Security Frameworks: Familiarity with industry-standard security frameworks and methodologies, particularly MITRE ATT&CK and NIST.

• Incident Management: Strong analytical and problem-solving skills, with the ability to manage escalated incidents, assess threats, coordinate remediation, and make informed decisions under pressure.

• Communication Skills: Excellent written and verbal communication skills, including the ability to explain technical findings, brief stakeholders, and coordinate effectively with both technical and non-technical teams.

• Continuous Learning: A proactive approach to professional development and an interest in emerging cybersecurity technologies, automation, and AI-assisted security operations.

• Preferred Qualifications: Certifications such as GCIH, GCIA, GCFA, Security+, CySA+, or equivalent credentials are advantageous. Experience in regulated industries such as gaming, financial services, or healthcare is also considered an asset.

Benefits

• Competitive Compensation: Annual base salary ranging from CAD 155,000 to CAD 185,000 , depending on qualifications, experience, and other applicable factors.

• Comprehensive Benefits: Access to a broad benefits package designed to support physical, financial, and emotional well-being.

• Remote Work: A remote opportunity based in Canada, offering flexibility in your working environment.

• Education and Conference Reimbursement: Financial support for professional education, industry conferences, and ongoing skills development.

• Professional Growth: Opportunities to deepen expertise in security operations, incident response, cloud security, automation, and emerging AI security technologies.

• Collaborative Environment: Work alongside dedicated technology professionals in a relaxed, team-oriented environment.

• Employee Support: Access to resources and benefits designed to support employees through everyday needs and important life milestones.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1