Cybersecurity Analyst

Avenue.io Inc.; Edmonton; On-site; CAD 85,000 - 110,000; Full time

Job summary

eStruxture is seeking a Cybersecurity Analyst to monitor, detect, and respond to security incidents across the Division’s network and information systems. You will collaborate with IT and other departments to safeguard assets and educate staff and students on best practices.

Responsibilities include incident handling, vulnerability tracking with tools like CrowdStrike and Tenable, and maintaining the cybersecurity website. Emphasis on change management and ongoing professional development.

Qualifications

• Bachelor’s degree and/or 2 years’ cybersecurity experience.
• CEH certification and ISC certification planned within three years.
• Understanding of cybersecurity risk management frameworks.

Responsibilities

• Review and investigate security reports from monitoring tools.
• Respond to incidents to mitigate threats.
• Educate end-users on cybersecurity best practices.
• Develop and maintain a cybersecurity website within Division SharePoint.
• Document changes and communications to stakeholders.

Skills

Security monitoring

Incident response

User education

Change management

Communication

Team collaboration

Education

Bachelor’s degree in cybersecurity

CEH certification

ISC certification

Tools

CrowdStrike

Tenable

Configuration Manager/Intune

Job description

Position Summary

The Cybersecurity Analyst plays a crucial role in safeguarding the Division's digital assets by monitoring, detecting, and responding to security incidents. This position supports the implementation and utilization of current and emerging technologies to ensure the security and integrity of the Division's network and information systems. By collaborating with various departments, the analyst helps to create a secure environment that enables staff and students to effectively use technology in the delivery of the curriculum. The role also involves educating end-users on cybersecurity best practices and maintaining the Division's cybersecurity website to keep everyone informed about current threats and protective measures.

Duties & Responsibilities

1. Manage Security Incidents (30%)

• Review and investigate security reports generated by various monitoring tools.
• Respond to incidents promptly to mitigate potential threats.
• Collaborate with IT and other departments to resolve security issues.
• Document incidents and actions taken for future reference and compliance.
• Ensure continuous improvement of incident response processes.

2. Monitor Network Security (25%)

• Perform active security monitoring to detect, analyze, and limit intrusions.
• Utilize tools like CrowdStrike and Tenable for patching vulnerabilities.
• Track outstanding vulnerabilities and ensure they are appropriately addressed.
• Conduct regular security assessments to identify potential risks.
• Maintain up-to-date knowledge of emerging threats and mitigation strategies.

3. Support End-Users (20%)

• Provide day-to-day support to end-users regarding cybersecurity issues.
• Educate users on best practices for password management and security.
• Contact users with known credential breaches to change passwords.
• Develop and maintain a cybersecurity website within the Division SharePoint portal.
• Offer guidance and training to staff and students on current cybersecurity threats.

4. Participate in Change Management (15%)

• Review and verify the risk of changes to Division networks and infrastructure.
• Participate in change log notifications to ensure security considerations are met.
• Collaborate with the change management team to implement secure changes.
• Document and communicate changes to relevant stakeholders.
• Ensure compliance with organizational policies and procedures.

5. Maintain Technical Knowledge (10%)

• Engage in professional development activities to stay current with industry trends.
• Obtain and maintain relevant certifications such as Certified Ethical Hacker (CEH)
• Participate in training sessions, workshops, and conferences.
• Share knowledge and best practices with team members.
• Contribute to the development of cybersecurity policies and procedures.

Knowledge

• Bachelor's degree or post-secondary diploma or 2 years' experience in cybersecurity.
• Certified Ethical Hacker (CEH) certification and ISC certification (to be obtained within three years).
• Understanding of cybersecurity risk management frameworks and best practices.
• Familiarity with application and infrastructure security solutions, including Firewalls, Intrusion Detection Systems (IDS)/Intrusion Prevention Systems (IPS), Security Information and Event Management (SIEM), Network Security, Password Management, Data Encryption, and Access Management.
• Understanding of the educational environment and its unique technical requirements.
• General knowledge of the Division’s operations and business and a general understanding of the Division’s mission and vision in a faith-based environment.
• Knowledge of records management principles, the Protection of Privacy Act (POPA), and the Access to Information Act (ATIA).
• Knowledge of workplace safety and awareness of Occupational Health and Safety regulations.
• Knowledge and alignment with the Division's administrative procedures.

Skills

• Proficiency in using security monitoring tools and Configuration Manager/Intune for patching vulnerabilities.
• Strong problem-solving skills and the ability to influence decisions.
• Excellent interpersonal skills and the ability to communicate effectively both verbally and in writing.
• Ability to present complex technical concepts in a simple, understandable format.
• Strong time management skills and the ability to remain calm and focused in stressful situations.
• Strong teamwork skills and the ability to work independently and collaboratively.
• Customer service-focused attitude and the ability to provide guidance and mentoring to non-technical staff.
• Skill in working with others to achieve common objectives.

Competencies

• Ability to adjust to changing circumstances and priorities.
• Capability to guide and inspire others towards achieving goals.
• Aptitude for identifying issues and developing effective solutions.
• Proficiency in conveying information clearly and effectively.