Cybersecurity Analyst – Operational

COFOMO; Montreal; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation

Wellness program

Telemedicine access

Career development

Hybrid work environment

Job summary

COFOMO in Montreal is seeking a Cybersecurity Analyst – Operational to protect our clients' digital assets and support secure operations in a hybrid Montreal environment.

The candidate will monitor threats, manage incident response plans, and advise on security across development, architecture, and operations. Fluency in French and English is required, with extensive experience in Microsoft Security tools and governance.

Qualifications

• Bachelor’s degree in computer science, information technology, information security or related field.
• At least ten years in cybersecurity, including five years specializing with the Microsoft Security suite.
• Certification in information technology field (relevant).
• Five+ years in information security.
• Mastery of information security principles, methodologies and standards (NIST).
• Prolific knowledge of security platforms, detection, protection and monitoring tools.
• Fluency in French and English (oral and written).

Responsibilities

• Ensure security of operations from a digital sovereignty perspective.
• Continuously monitor threats, vulnerabilities and risks; advise on decisions.
• Assess impacts of vulnerabilities on infrastructure and maintain asset knowledge.
• Advise teams on security requirements for development and operations.
• Collaborate in change management assessing risks to security of operations.
• Contribute to security risk analyses and mitigation.
• Develop and update security incident response plans and procedures.
• Configure, maintain and optimize security monitoring tools and log analysis.
• Perform security operational activities including access and privilege management.
• Coordinate during security incidents and crises; monitor containment and remediation.
• Produce documentation: incident reports, cause analyses and post-incident reports.
• Follow up on recommendations from incidents and risk analyses.
• Contribute to continuous improvement of operational cybersecurity practices.

Skills

Threat monitoring

Incident response

Security governance

Communication skills

Security operations

Education

Bachelor’s degree in Computer Science/IT/Information Security

Tools

Microsoft Security Suite

Azure Security Engineer

Security Operations Tools

Job description

87367# Cybersecurity Analyst – OperationalMontrealHybridData and Artificial IntelligenceApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here's a brief overview of the tasks and responsibilities you'll have :** • Ensure the security of technological operations from a digital sovereignty perspective, contributing to data protection and the control of risks related to technological dependencies; • Continuously monitor for threats, vulnerabilities and risks that may affect operations, and make recommendations to support decision-making; • Assess the impacts of known vulnerabilities on the infrastructure and technology components used, and maintain up-to-date knowledge of the assets involved; • Advise the responsible teams on requirements and security considerations related to development, technology architecture, operations and project planning; • Collaborate in the change management process by assessing risks and potential impacts on the security of operations; • Contribute to information security risk analyses, identify threats and vulnerabilities, and recommend appropriate mitigation or mitigation measures; • Participate in the development, updating and evolution of security incident response plans and procedures, including the required escalation and coordination mechanisms; • Configure, maintain and optimize security monitoring tools, provide daily monitoring of environments and analyze logs and events when required; • Perform security operational activities, including those related to managing elevated privileges, access, and decompartmentalization requests; • Coordinate activities during events or security incidents, participate in crisis units and monitor containment, correction and remediation measures; • Produce and maintain required documentation, including incident reports, cause analyses, post-incident reports, and safety event logs; • Follow up on recommendations and corrective actions arising from incidents, vulnerabilities and risk analyses; • Participate in the continuous improvement of operational cybersecurity practices and procedures as well as the evolution of performance indicators, monitoring mechanisms and the quality of security services. **The profile you are looking for is as follows:** • Bachelor's degree in computer science, information technology, information security or a related field, or an equivalent combination of relevant education, experience and certifications; • Have at least ten (10) years of experience in cybersecurity, including a minimum of five (5) years specialized with the Microsoft Security suite; • Hold a recognized certification of specialization in the field of information technology; • Have experience in information security, with a minimum of five (5) years; • Master the principles, methodologies and standards in information security and operational cybersecurity; • Knowledge of security platforms and technologies, including detection, protection, and monitoring tools; • Understand technology architecture, multi-environment infrastructures, networking concepts, and identity and access management; • Knowledge of information technology governance, government information security guidance, and recognized best practices, including those of NIST; • Master the Office suite; • Demonstrate an excellent command of French and English, both oral and written; • Strong technical, analytical, interpersonal, and writing skills; • Demonstrate a capacity for synthesis and an ability to popularize and present technical concepts or complex issues to different audiences, including managers and technical users; • Effectively write technical and analytical documents, including procedures, reports, benchmarking, and cause analysis; • Demonstrate rigor, excellent organizational skills and an ability to intervene quickly in an operational context; • Have a good knowledge of the government and health sector context and their technology and information security orientations (an asset); • Hold a relevant Microsoft security certification, including Azure Security Engineer Associate, Security Operations Analyst Associate, or equivalent certification (an asset).Apply## Why choose a career at COFOMO?\\** Competitive compensation and benefits* Wellness program* 24/7 telemedicine access* Support for legal, accounting, and mental health needs* Focus on growth, development, and skills enhancement* Personalized career plan and tailored guidance* Hybrid work environment* Active social club and year-round events*\\* Only applicable to permanent COFOMO employees.*