Cyber Security Analyst

koundinyasa Technology Services; Montreal; On-site; CAD 70,000 - 110,000; Full time

Job summary

koundinyasa Technology Services is seeking a cybersecurity professional in Montreal to monitor and respond to security incidents across networks, systems, and applications. You will perform vulnerability assessments, coordinate remediation activities, and conduct risk analyses with recommended mitigations.

You will investigate breaches, manage SIEM, firewalls, IDS/IPS, and EDR tools, and participate in audits and compliance checks to strengthen overall security posture.

Qualifications

• 2 to 5 years of experience in cybersecurity, information security, or network security roles.

Responsibilities

• Monitor, detect, and respond to security incidents across networks, systems, and applications.

Skills

Cybersecurity

Incident response

Risk analysis

Threat detection

Log analysis

Scripting (basic)

Tools

Splunk

QRadar

Firewalls

IDS/IPS

EDR

Nessus

Qualys

OpenVAS

Job description

• Monitor, detect, and respond to security incidents across networks, systems, and applications.


• Perform vulnerability assessments and coordinate remediation activities.


• Conduct security risk analysis and recommend mitigation strategies.


• Investigate security breaches and perform root cause analysis.


• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.


• Conduct periodic security audits and compliance checks.


• Implement and enforce security policies, standards, and procedures.


• Support incident response activities and participate in security drills.


• Work closely with IT, DevOps, and development teams to strengthen system security.


• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

What You’ll Do

• Monitor, detect, and respond to security incidents across networks, systems, and applications.


• Perform vulnerability assessments and coordinate remediation activities.


• Conduct security risk analysis and recommend mitigation strategies.


• Investigate security breaches and perform root cause analysis.


• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.


• Conduct periodic security audits and compliance checks.


• Implement and enforce security policies, standards, and procedures.


• Support incident response activities and participate in security drills.


• Work closely with IT, DevOps, and development teams to strengthen system security.


• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Experience

What You Should Know

• 2 to 5 years of experience in cybersecurity, information security, or network security roles.

Security Monitoring & Tools

• Hands-on experience with SIEM tools (Splunk, QRadar, or similar).


• Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).


• Knowledge of log analysis and threat detection.

Vulnerability Management

• Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).


• Understanding of CVSS scoring and risk prioritization.

Network & System Security

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs.


• Knowledge of Windows/Linux system security hardening.

Cloud Security (Preferred)

• Experience securing AWS, Azure, or GCP environments.


• Knowledge of IAM policies, cloud monitoring, and data encryption.

Compliance & Standards

• Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).


• Experience supporting security audits.

Incident Response

• Understanding of incident handling lifecycle.


• Ability to perform basic digital forensics and log investigation.

Scripting & Automation (Preferred)

• Basic knowledge of Python, Bash, or PowerShell for automation.

Soft Skills

• Strong analytical and investigative mindset.


• Excellent documentation and reporting skills.


• Ability to work under pressure during security incidents.

Nice-to-Have

• Certifications such as CEH, CISSP, Security+, CISM.


• Experience with penetration testing tools (Metasploit, Burp Suite, Nmap).


• Exposure to DevSecOps practices.


• Knowledge of Zero Trust architecture.