Analyst, Cyber Security

Brookfield Renewable Partners L.P.; Gatineau; On-site; CAD 85,000 - 120,000; Full time

Benefits offered by this job

Gym access

Bike storage

Healthy snacks

Job summary

Brookfield Renewable in Canada is seeking a Cyber Security Analyst to strengthen security operations across our cloud-based infrastructure. You will monitor threats, respond to incidents, and implement protections using Microsoft 365 Defender, Azure Security Center, and Purview.

Reporting to the Cyber Security Director, you will configure IAM controls, manage DLP policies, and collaborate with IT teams to maintain business continuity while complying with GDPR, ISO 27001, and NIST frameworks.

Qualifications

• 3+ years of experience in Cyber Security or Cloud Security.
• Strong knowledge of Microsoft Security solutions, including Azure, Office 365, EOP, and Microsoft Purview.
• Hands-on experience with SIEM tools (Microsoft Sentinel preferred).
• Familiarity with email security, phishing detection, and incident response practices.
• Knowledge of PowerShell and KQL scripting for security automation is a plus.
• Preferred certifications include AZ-500, MS-500, SC-200, CISSP, or CEH.
• Excellent communication skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders.

Responsibilities

• Security Monitoring & Threat Detection: Monitor and analyze alerts from Defender, Sentinel, and EOP; investigate phishing and malware threats; perform threat hunts using Purview and Azure tools.
• Incident Response & Threat Mitigation: Lead incident response; develop playbooks; coordinate remediation with IT and security teams; perform root cause analysis and post-incident reviews.
• Cloud Security & Compliance: Manage controls in Microsoft 365 Defender and Azure Security Center; ensure GDPR, ISO 27001, and NIST compliance using Purview.
• IAM: Configure Azure AD Conditional Access; monitor risky sign-ins and MFA bypass; secure privileged access with PIM.
• Data Protection & DLP: Implement DLP policies with Purview; enforce email encryption and sensitivity labels; monitor for data exfiltration.

Skills

Cybersecurity

Cloud Security

Incident Response

PowerShell Scripting

KQL

Security Analytics

Tools

Microsoft Sentinel

Azure Security Center

Defender for Office 365

Microsoft Purview

Job description

Brookfield Renewable, as one of the core businesses under Brookfield Corporation, is one of the world’s largest owners, operators, and developers of renewable power, with $125 billion power assets under management. Our diverse portfolio of hydro, wind, solar, distributed energy, storage, and sustainable solutions extends across five continents, totaling over 46,000 megawatts of generating capacity. We use our operating capabilities, scale and global reach to develop and operate a high-quality clean energy portfolio in a responsible manner, helping accelerate the global transition to net zero.

Come Join Us

At Brookfield Renewable, we attract and retain high-performing individuals who are interested in making an impact, driving meaningful change and being part of a fast-paced and collaborative environment. Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. Together, we contribute to the success of one of the fastest growing and largest publicly traded, pure play renewable power platforms in the world while supporting decarbonization and greater energy sustainability to facilitate the global transition to a net-zero.

About the Role

As a member of the BSG Cybersecurity team, reporting to the Director of Cyber Security and under the operational direction of the Cybersecurity Manager, the Cyber Security Analyst will strengthen our security operations and protect our cloud-based infrastructure. You will leverage hands‑on expertise in Microsoft Azure, Office 365 Security, Exchange Online Protection (EOP), and Microsoft Purview to monitor, detect, and mitigate evolving security threats. This role is pivotal in driving effective incident response and ensuring continuous protection of our information assets.

Key Responsibilities

• Security Monitoring & Threat Detection: Monitor and analyze security alerts from Microsoft Defender, Sentinel, and EOP. Investigate and respond to phishing, malware, and insider threats. Conduct forensic analysis and threat hunting using Microsoft Purview and Azure security tools.
• Incident Response & Threat Mitigation: Lead incident response efforts by identifying, containing, and eradicating security threats. Develop and execute incident response playbooks for cloud and email security incidents. Coordinate with IT and security teams to remediate threats and ensure business continuity. Document incident findings, perform root cause analysis, and conduct post‑incident reviews.
• Cloud Security & Compliance: Manage security controls and policies in Microsoft 365 Defender and Azure Security Center. Ensure compliance with standards such as GDPR, ISO 27001, and NIST through Microsoft Purview Compliance Manager. Implement and optimize email security policies (EOP, Defender for O365) to minimize phishing risks.
• Identity & Access Management (IAM): Configure and monitor Azure AD Conditional Access Policies. Analyze and mitigate risky sign‑in activities and MFA bypass attempts. Secure privileged access using Privileged Identity Management (PIM).
• Data Protection & DLP: Implement Data Loss Prevention (DLP) policies using Microsoft Purview. Enforce email encryption, sensitivity labels, and insider risk policies. Monitor and respond to potential data exfiltration attempts.

Knowledge and Experience Required

• 3+ years of experience in Cyber Security or Cloud Security.
• Strong knowledge of Microsoft Security solutions, including Azure, Office 365, EOP, and Microsoft Purview.
• Hands‑on experience with SIEM tools (Microsoft Sentinel preferred).
• Familiarity with email security, phishing detection, and incident response practices.
• Knowledge of PowerShell and KQL scripting for security automation is a plus.
• Preferred certifications include AZ-500, MS-500, SC-200, CISSP, or CEH.
• Excellent communication skills, with the ability to articulate complex security concepts to both technical and non‑technical stakeholders.

Note: Offices continue to be central to collaboration and Brookfield’s identity. This position requires the employee to be on‑site for a minimum of 4 days to perform most effectively.

Working here, you will enjoy:

At Brookfield, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential.

• We work to recognize you in meaningful, personalized ways including a competitive salary, bonus structure, a health benefits program, and defined contribution pension plan.
• Our spaces are open, dynamic, and collaborative, giving you access to different businesses and teams. For your wellbeing, our building is equipped with a modern gym, bike storage, and healthy snacks and drinks.
• We cultivate a culture where we invest in your growth and development.

Diversity & Inclusion

Brookfield Renewable embraces and promotes the principles of diversity, equity, and inclusion. We welcome and encourage applications from all qualified candidates, including women, Indigenous peoples and other persons of all races, ethnic origins, religions, abilities, sexual orientations, and gender identities and expressions. We also provide accommodation during all parts of the hiring process, upon request. If contacted to proceed to the recruitment process, please advise us if you require any accommodation.