Cyber Security Analyst

koundinyasa Technology Services; Montreal; On-site; CAD 70,000 - 90,000; Full time

Job summary

koundinyasa Technology Services is seeking a cybersecurity professional to monitor, detect, and respond to incidents across networks, systems, and applications. You will perform vulnerability assessments, conduct risk analysis, and coordinate remediation efforts.

You will investigate breaches, manage SIEM/EDR tools, and participate in audits and security drills while collaborating with IT, DevOps, and development teams to strengthen overall security posture.

Qualifications

• 2 to 5 years of experience in cybersecurity, information security, or network security roles.
• Knowledge of log analysis and threat detection.
• Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).
• Understanding of CVSS scoring and risk prioritization.
• Experience securing AWS, Azure, or GCP environments.
• Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).
• Basic knowledge of Python, Bash, or PowerShell for automation.
• Strong analytical and investigative mindset.

Responsibilities

• Monitor, detect, and respond to security incidents across networks, systems, and applications.
• Perform vulnerability assessments and coordinate remediation activities.
• Conduct security risk analysis and recommend mitigation strategies.
• Investigate security breaches and perform root cause analysis.
• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.
• Conduct periodic security audits and compliance checks.
• Implement and enforce security policies, standards, and procedures.
• Support incident response activities and participate in security drills.
• Work closely with IT, DevOps, and development teams to strengthen system security.
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Skills

Cybersecurity

Incident response

Threat detection

Log analysis

Documentation

Analytical thinking

Pressure management

Tools

Splunk

QRadar

Firewalls

IDS/IPS

EDR

Nessus

Qualys

OpenVAS

Metasploit

Burp Suite

Nmap

AWS

Azure

GCP

Job description

• Monitor, detect, and respond to security incidents across networks, systems, and applications.


• Perform vulnerability assessments and coordinate remediation activities.


• Conduct security risk analysis and recommend mitigation strategies.


• Investigate security breaches and perform root cause analysis.


• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.


• Conduct periodic security audits and compliance checks.


• Implement and enforce security policies, standards, and procedures.


• Support incident response activities and participate in security drills.


• Work closely with IT, DevOps, and development teams to strengthen system security.


• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

What You’ll Do

• Monitor, detect, and respond to security incidents across networks, systems, and applications.


• Perform vulnerability assessments and coordinate remediation activities.


• Conduct security risk analysis and recommend mitigation strategies.


• Investigate security breaches and perform root cause analysis.


• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.


• Conduct periodic security audits and compliance checks.


• Implement and enforce security policies, standards, and procedures.


• Support incident response activities and participate in security drills.


• Work closely with IT, DevOps, and development teams to strengthen system security.


• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Experience

What You Should Know

• 2 to 5 years of experience in cybersecurity, information security, or network security roles.

Security Monitoring & Tools

• Hands-on experience with SIEM tools (Splunk, QRadar, or similar).


• Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).


• Knowledge of log analysis and threat detection.

Vulnerability Management

• Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).


• Understanding of CVSS scoring and risk prioritization.

Network & System Security

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs.


• Knowledge of Windows/Linux system security hardening.

Cloud Security (Preferred)

• Experience securing AWS, Azure, or GCP environments.


• Knowledge of IAM policies, cloud monitoring, and data encryption.

Compliance & Standards

• Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).


• Experience supporting security audits.

Incident Response

• Understanding of incident handling lifecycle.


• Ability to perform basic digital forensics and log investigation.

Scripting & Automation (Preferred)

• Basic knowledge of Python, Bash, or PowerShell for automation.

Soft Skills

• Strong analytical and investigative mindset.


• Excellent documentation and reporting skills.


• Ability to work under pressure during security incidents.

Nice-to-Have

• Certifications such as CEH, CISSP, Security+, CISM.


• Experience with penetration testing tools (Metasploit, Burp Suite, Nmap).


• Exposure to DevSecOps practices.


• Knowledge of Zero Trust architecture.