Cybersecurity Incident Response Analyst

Aviva; Toronto; Hybrid; CAD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking an experienced Cybersecurity Analyst to join their dynamic team. This role involves managing cybersecurity incidents, conducting detailed investigations, and collaborating with internal teams to enhance security measures. The successful candidate will thrive in a fast-paced environment and possess strong technical skills in incident response tools. With a commitment to employee wellness and a hybrid work model, this role offers a compelling rewards package and opportunities for professional growth. If you are passionate about cybersecurity and ready to make an impact, this is the perfect opportunity for you.

Benefits

Annual bonus eligibility

Retirement savings plan

Health benefits

Competitive vacation package

Corporate wellness programs

Volunteer opportunities

Qualifications

• 5+ years in cybersecurity incident response, preferably in financial services.
• Strong skills in analyzing cybersecurity alerts and determining business impact.

Responsibilities

• Manage incident response activities and create summary reports.
• Analyze cybersecurity alerts and determine effective containment strategies.

Skills

Cybersecurity Incident Response

Network Protocols

Incident Response Tools (EDR, SIEM, SOAR)

Vulnerability Analysis

Threat Hunting

Communication Skills

Education

Cybersecurity Certification (CISCP, OSCP, etc.)

Bachelor's Degree in Computer Science or related field

Tools

EDR

SIEM

SOAR

Job description

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

We are looking for an experienced cybersecurity incident responder who can manage incidents at Tier 3 level and who is experienced in investigating cybersecurity incidents using incident response tools. The Cybersecurity Analyst – Incident Response role will also support internal fraud and financial crime investigations where there is a cyber element. This position has an on-call rotation element to provide prompt response to mitigate impact a 24/7.

The candidate will have experience with Information Technology and a solid level knowledge of Cybersecurity principles.

The role is part of Aviva’s Canada Cybersecurity Operations team and will be primarily based out of our Markham office.

What you'll do

1. Take ownership of incident response activities and create summary reports for management and other internal stakeholders
2. Analyze advanced cybersecurity alerts from managed service providers to determine impact, select most effective containment and remediation activities, and ensure appropriate recovery takes place
3. Maintain effectiveness of incident response tools, including EDR, SIEM, and SOAR, by identifying enhancement opportunities in configuration and alerting rules while practicing and improving practical skills
4. Conduct detailed technical investigation of cybersecurity incident root causes including threat vector, technique and tactics
5. Be diligent throughout shift and when on call to quickly response to cybersecurity alerts and be available for time sensitive responses
6. Work with key internal teams from Group CISO, Privacy Office, and Financial Crime Teams to support other investigations where there is a cyber element
7. Adapt to fast-paced environment

What you'll bring

1. At least 5 years of experience directly working in cybersecurity incident response, preferably in a large financial services institution
2. Strong incident response technical skills, knowledge of network protocols and network communication principles, understanding of vulnerabilities and remediation techniques
3. Demonstrated ability to analyze cybersecurity alerts to determine business impact and selecting containment and remediation activities that appropriate recovery
4. Maintain effectiveness of incident response tools, including EDR, SIEM, and SOAR, by identifying enhancement opportunities in configuration and alerting rules while practicing and improving practical skills
5. Conduct detailed technical investigation of cybersecurity incidents and identified root causes including threat vector, technique and tactics.
6. Demonstrated ability to establish effective working relationships and collaborative work approaches with both internal and external peers
7. Obtained or pursuing a recognized cybersecurity incident response or related certification, such as CISCP, OSCP, CIH, CHFI etc.
8. Experience reviewing, analyzing, discussing, explaining, and reporting cyber threats and results.
9. Strong interpersonal and communication skills, ability to respond to multiple incidents simultaneously and in a prioritized matter.
10. Preferred candidates will also have experience in threat hunting OR threat intelligence OR forensics, in addition to cybersecurity incident response.

What you’ll get

• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Competitive vacation package with the option to purchase 5 extra days off per year.
• Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support our employees’ physical and mental health.
• Hybrid flexible work model.

Please note that we may use AI tools to help us through the recruitment process. This is an existing position which has been posted both internally & externally.

Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.

About the company

We’re here to protect our 33 million customers from life’s unexpected twists and turns – freeing them from fear of uncertainty. We are one of only a few insurance companies in the world that can provide customers with life, general and health insurance, and asset management in one place – a composite insurer. And we have a unique competitive advantage. Whether we’re protecting them from everyday risks or helping them to save for the future, we put customers at the heart of all we do – creating a bright and sustainable future for our customers, employees and our communities.