Analyst III, Security Operations

Liberty; Oakville; On-site; CAD 70,000 - 110,000; Full time

Job summary

An established industry player seeks a passionate Security Operations Analyst III to join their dynamic team. In this pivotal role, you will be responsible for maintaining the confidentiality and integrity of information assets while collaborating with various stakeholders to enhance the security operations program. You will engage in daily security operations, including incident monitoring, threat intelligence gathering, and vulnerability management. This position offers an opportunity to work in a collaborative environment that values continuous learning and innovation, allowing you to make a significant impact on the organization's cybersecurity posture. If you are driven by excellence and eager to develop your skills, this role is perfect for you.

Qualifications

• 5+ years of experience in cybersecurity with a strong focus on incident response.
• Relevant security certifications such as CISSP or Security+ are advantageous.

Responsibilities

• Monitor and report on security alerts and incidents throughout the day.
• Develop dashboards and reporting to meet organizational needs.
• Perform forensic analysis and validate suspicious events.

Skills

Cybersecurity

Incident Response

Communication Skills

Forensic Analysis

Automation

Education

Bachelor's Degree or Equivalent Experience

Tools

SIEM

EDR Platforms

Ticket Management Systems

Microsoft Office Suite

Job description

At Algonquin-Liberty, we hire passionate people who care about doing the right thing for our customers. We are entrepreneurial, creative, and outcome-focused. Here, your natural talent and achievements will flourish in an inclusive environment of teamwork, trust and continuous learning. We are always pursuing excellence to exceed our ambitions goals, rewarding both the goal outcome and how we achieve it.

Purpose

As the Analyst III, Security Operations will be responsible for maintaining the confidentiality, integrity and availability of information assets and ensuring operational best practices and delivering on agreed upon service expectations and procedures. As a Security Operations Analyst III at Liberty, you will be collaborating with stakeholders across the organization to operate and sustain a security operations program. You will be instrumental in operationalizing the Security Operations Team at Liberty – defending both the Information Technology (IT) and Operational Technology (OT) environments against an ever-evolving threat landscape. You will work alongside the IT Infrastructure, IT Operations, and other security partners within Liberty to support the enterprise cybersecurity program. You will be an active team member in daily Security Operations which includes Incident Monitoring & Response, Web Application Firewall administration, SIEM administration, Threat Intelligence gathering, Threat Hunting, Tabletop Exercise execution, Red & Blue team engagements, and Vulnerability Management. Your role will also include supporting various IT related engagements such as supporting regulatory and compliance requirements (NERC CIP, SOX, PCI-DSS). The Analyst III, Security Operations must apply their advanced knowledge of security technology and operations gained extensive professional experience with these technologies, processes, and theories. You will help develop and coach junior members of the team in advancing their knowledge and expertise upon effective security operations and administration.

Accountabilities

• Monitor, track, and report on security alerts, and incidents that happen throughout the day.
• Develop and deploy dashboards and reporting to meet Liberty’s needs.
• Validate suspicious events and incidents using open-source and proprietary intelligence sources.
• Perform as an escalation point for Tier I and II Analysts, as necessary, related to alerts.
• Standardize and Maintain Incident Response Playbooks.
• Perform forensic analysis on workstations, malware, malicious domains, etc.
• Leverage strong communication skills, written and verbal.
• Monitor Security Monitoring Tools for Alerts.
• Support ITSRC projects and IT engagements.
• Review, document, evaluate, and support response to reported phishing emails.
• Develop and compile reports on security incidents (phishing, viruses, breaches, etc.).
• Respond to and research innovation request technologies submitted by the business. Triage and provide recommendations to IT Security Risk and Compliance leads.
• Save time by automating repetitive tasks in SOAR.
• Create and tune custom detections in SIEM and EDR platforms.

Education and Experience

• University - Bachelor degree or equivalent experience.
• 5 + years of cybersecurity experience.
• Relevant security certifications is an asset (i.e., GCIA, GCIH, GSOC, Security+, CISSP, etc.).
• Strong background in ticket management systems.
• Strong familiarity in incident response.
• Windows-Administration background.
• Familiarity of IT Best-Practices (NIST, ISO27001).
• Understanding of antimalware technologies (Signature-based & Heuristic).
• Solid understanding of threat vectors and incident response investigation best-practices.
• PC skills and hands-on experience building tools and presentations with Microsoft Word, Excel, PowerPoint, Project, and Access.
• Knowledge of scripting languages is required.
• Knowledge of information security industry best practices is required.