Cyber Security Analyst

koundinyasa Technology Services; Montreal (administrative region); On-site; CAD 70,000 - 100,000; Full time

Job summary

koundinyasa Technology Services in Montreal is seeking a cybersecurity professional to monitor, detect, and respond to security incidents across networks, systems, and applications. You will perform vulnerability assessments, coordinate remediation, and conduct security risk analyses to recommend mitigations.

You will investigate breaches and manage SIEM, firewalls, IDS/IPS, and EDR tools. Join a team that collaborates with IT/DevOps, stays ahead of threats, and supports audits with a strong

Qualifications

• 2 to 5 years of experience in cybersecurity, information security, or network security roles.
• Hands-on experience with SIEM tools (Splunk, QRadar, or similar).
• Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).
• Knowledge of log analysis and threat detection.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs; Windows/Linux system security hardening.
• Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).
• Basic scripting knowledge in Python, Bash, or PowerShell.
• Strong analytical and investigative mindset; excellent documentation.

Responsibilities

• Monitor, detect, and respond to security incidents across networks, systems, and applications.
• Perform vulnerability assessments and coordinate remediation activities.
• Conduct security risk analyses and recommend mitigation strategies.
• Investigate security breaches and perform root cause analysis.
• Manage SIEM, firewalls, IDS/IPS, and endpoint protection tools.
• Support security audits and ensure compliance with standards.

Skills

Analytical thinking

Investigative mindset

Documentation

Pressure handling

Education

Bachelor's degree in Computer Science / Information Security

Tools

Splunk

QRadar

EDR

Firewalls

Nessus

Qualys

OpenVAS

PowerShell

Python

Job description

• Monitor, detect, and respond to security incidents across networks, systems, and applications.
• Perform vulnerability assessments and coordinate remediation activities.
• Conduct security risk analysis and recommend mitigation strategies.
• Investigate security breaches and perform root cause analysis.
• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.
• Conduct periodic security audits and compliance checks.
• Implement and enforce security policies, standards, and procedures.
• Support incident response activities and participate in security drills.
• Work closely with IT, DevOps, and development teams to strengthen system security.
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

What You’ll Do

• Monitor, detect, and respond to security incidents across networks, systems, and applications.
• Perform vulnerability assessments and coordinate remediation activities.
• Conduct security risk analysis and recommend mitigation strategies.
• Investigate security breaches and perform root cause analysis.
• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.
• Conduct periodic security audits and compliance checks.
• Implement and enforce security policies, standards, and procedures.
• Support incident response activities and participate in security drills.
• Work closely with IT, DevOps, and development teams to strengthen system security.
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Experience

What You Should Know:

• 2 to 5 years of experience in cybersecurity, information security, or network security roles.

Security Monitoring & Tools

• Hands‑on experience with SIEM tools (Splunk, QRadar, or similar).
• Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).
• Knowledge of log analysis and threat detection.

Vulnerability Management

• Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).
• Understanding of CVSS scoring and risk prioritization.

Network & System Security

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs.
• Knowledge of Windows/Linux system security hardening.

Cloud Security (Preferred)

• Experience securing AWS, Azure, or GCP environments.
• Knowledge of IAM policies, cloud monitoring, and data encryption.

Compliance & Standards

• Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).
• Experience supporting security audits.

Incident Response

• Understanding of incident handling lifecycle.
• Ability to perform basic digital forensics and log investigation.

Scripting & Automation (Preferred)

• Basic knowledge of Python, Bash, or PowerShell for automation.

Soft Skills

• Strong analytical and investigative mindset.
• Excellent documentation and reporting skills.
• Ability to work under pressure during security incidents.

Nice-to-Have

• Certifications such as CEH, CISSP, Security+, CISM.
• Experience with penetration testing tools (Metasploit, Burp Suite, Nmap).
• Exposure to DevSecOps practices.
• Knowledge of Zero Trust architecture.