Cyber Security Analyst

Arsenault; Ottawa; On-site; CAD 85,000 - 110,000; Full time

Job summary

Arsenault in Ottawa is seeking a Cybersecurity Analyst to support risk mitigation within the Information Security and Technology Risk group, protecting information assets from current and emerging threats. You will monitor systems, manage security tools, coordinate rule updates, investigate incidents, and drive awareness programs across the organization.

This role requires a university degree and 5 years of relevant experience; CISSP is preferred but not required.

Qualifications

• University degree in Computer Science, Cybersecurity or related field.
• 5+ years of experience as cybersecurity analyst, security operations, or related roles.
• CISSP is preferred but not required.

Responsibilities

• Use tools to monitor and analyze system activity to detect malicious activity and apply mitigations.
• Maintain security tools such as malware detection, DDoS, IDS/IPS, DLP, and anti-spam.
• Coordinate updates of rules and signatures across the information security stack.
• Conduct research, trend analysis, and reporting across logs and alerts.
• Support triage, investigation and response of cybersecurity incidents.

Skills

Cybersecurity analysis

Incident response

Threat intelligence

Security monitoring

Network security

PowerShell scripting

SQL

Excel VBA

Communication

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

PowerShell

SQL

Excel VBA

IDS/IPS

DLP

Malware detection tools

Cloud security (AWS)

Job description

The Cybersecurity Analyst supports the risk mitigation efforts of our clients' Cyber Defense Operations (CDO) under the Information Security and Technology Risk group in order to safeguard and protect our information assets and critical data from current and emerging Cyber threats.

The Lead will apply their Cybersecurity skills and knowledge in the day-to-day management Cyber activities including, but not limited to:

• Use provided tools to perform continual monitoring and analysis of system activity to identify malicious activity and configure mitigations.
• Maintenance of various security tools and technologies such as: advanced malware detection, DDoS, IDS/IPS, DLP, Anti-spam as well as other Cyber threat intelligence and vulnerability management capabilities.
• Coordinate with other departments to manage and administer the updating of rules and signatures across the information security stack
• Conduct research, trend analysis, correlation and reporting across a wide variety of internal and external source data sets (e.g., network, OS, DB and application logs and alerts).
• Support the triage, investigation and response of Cybersecurity incidents. Analyze identified malicious activity in the computing environment to determine weaknesses exploited, exploitation methods, and effects on system and information.
• Prioritize and assign tasks to other team members as appropriate
• Lead Cybersecurity awareness program and training exercises.

What Were Looking For

• Completed University degree in Computer Science, Cybersecurity or a related technical field
• 5 years experience as cybersecurity analyst, information systems security administrator, or specialized expertise in cyber incident management, intelligence, analytics, audit.
• CISSP Preferred but not required

The Expertise You Bring

• Proficient and demonstrated experience in managing network security, UNIX and Windows operating systems security and Database security. Scripting knowledge of PowerShell, SQL, Excel VBA
• Excellent knowledge of Cybersecurity detect and respond methodologies, standards and best practices
• Knowledge of security threats, common attack vectors and the use of security tools to monitor the technology infrastructure and computing environment.
• Understanding of complex, enterprise-wide information systems security architecture and how network, application and host-based security controls work.
• Understanding of the underlying protocols including: HTTP, HTTPS, SQL, TCP/IP, Active Directory. Experience in Cloud Security & Integration (preferably AWS).
• Good understanding of systems development life cycle and secure application development.