Cyber Security Analyst

Spait Infotech; Canada; In loco; CAD 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

Spait Infotech is seeking a security analyst to monitor alerts and incidents across enterprise IT environments in Canada. You will analyze logs, investigate threats, and perform security incident detection, with documentation and remediation support.

The role involves working with SIEM tools, conducting vulnerability assessments, and ensuring compliance with security policies. Collaboration with IT and network teams is essential to strengthen controls and improve security posture.

Competenze

• Experience with SIEM monitoring and incident response.
• Proficient with vulnerability management tools.
• Knowledge of MITRE ATT&CK framework.
• Ability to document investigations clearly.
• Certifications in security are a plus.

Mansioni

• Monitor security alerts, events, and incidents across enterprise IT environments.
• Analyze security logs and investigate suspicious activities, potential threats, and vulnerabilities.
• Perform security incident detection, analysis, response, and documentation.
• Work with SIEM tools to identify and investigate security threats.
• Conduct vulnerability assessments and support remediation activities.
• Monitor network traffic and identify unusual or malicious activities.
• Support endpoint security, firewall, antivirus, and intrusion detection systems.
• Assist in threat intelligence analysis and security risk assessments.
• Perform security audits and ensure compliance with organizational security policies.
• Collaborate with IT infrastructure and network teams to strengthen security controls.
• Prepare security incident reports and maintain investigation documentation.
• Support security awareness initiatives and recommend improvements to security practices.
• Assist in implementing security frameworks and compliance requirements.

Conoscenze

Incident investigation

Threat detection

Security monitoring

Vulnerability assessment

Security policies

Team collaboration

Strumenti

Microsoft Sentinel

IBM QRadar

Wireshark

CrowdStrike Falcon

Nessus

Qualys

Rapid7

AWS IAM

Descrizione del lavoro

• Monitor security alerts, events, and incidents across enterprise IT environments.
• Analyze security logs and investigate suspicious activities, potential threats, and vulnerabilities.
• Perform security incident detection, analysis, response, and documentation.
• Work with SIEM tools to identify and investigate security threats.
• Conduct vulnerability assessments and support remediation activities.
• Monitor network traffic and identify unusual or malicious activities.
• Support endpoint security, firewall, antivirus, and intrusion detection systems.
• Assist in threat intelligence analysis and security risk assessments.
• Perform security audits and ensure compliance with organizational security policies.
• Collaborate with IT infrastructure and network teams to strengthen security controls.
• Prepare security incident reports and maintain investigation documentation.
• Support security awareness initiatives and recommend improvements to security practices.
• Assist in implementing security frameworks and compliance requirements.

Required Technical Skills

Security Monitoring & SIEM

• Microsoft Sentinel.
• IBM QRadar.
• Security log analysis and event correlation.
• Security alert monitoring and investigation.

Network Security

• TCP/IP, DNS, HTTP/HTTPS, VPN.
• Firewalls and network access controls.
• IDS/IPS technologies.
• Network traffic analysis.
• Wireshark.
• CrowdStrike Falcon.
• Antivirus and endpoint detection and response (EDR).
• Endpoint security monitoring.
• Security incident investigation.
• Threat detection and analysis.
• Malware analysis fundamentals.
• Phishing investigation.
• MITRE ATT&CK framework.
• Incident documentation and reporting.

Vulnerability Management

• Nessus.
• Qualys.
• Rapid7.
• Vulnerability scanning and remediation tracking.
• Risk assessment and security controls.
• AWS Security fundamentals.
• Identity and Access Management (IAM).
• Cloud security monitoring.

Preferred Qualifications & Certifications

• CompTIA Security+.
• Certified SOC Analyst (CSA).
• Certified Information Systems Security Professional (CISSP), where applicable.
• Certified Ethical Hacker (CEH).
• Microsoft Security certifications.
• GIAC Security Essentials (GSEC).
• Strong analytical and problem-solving skills.
• Critical thinking and incident investigation capabilities.
• Ability to work under pressure during security incidents.
• Team collaboration and stakeholder management.
• Strong understanding of security policies and best practices.
• Security monitoring and incident investigation reports.
• Threat detection and security analysis.
• Vulnerability assessment reports.
• Security risk assessment reports.
• Recommendations for improving organizational security posture.