Info Security Analyst IV

ICONMA; Toronto; On-site; CAD 80,000 - 100,000; Full time

Job summary

A leading banking company in Toronto seeks an experienced Info Security Analyst IV to develop security strategies and simulate attacks to enhance security protocols. The ideal candidate should have over 5 years of experience in cyber security, especially in breach and attack simulations, with strong skills in Python and PowerShell. This role includes collaborating with teams to identify gaps in security measures and providing actionable recommendations.

Benefits

Health Benefits

Referral Program

Growth and advancement opportunities

Qualifications

• 5+ years of experience in cyber security, with a focus on breach and attack simulation.
• Advanced knowledge of security incident and event management.
• Experience with cloud infrastructures like AWS and Azure preferred.

Responsibilities

• Develop and implement controls assurance strategy.
• Create attack scenarios to test security controls.
• Collaborate with teams to identify and remediate security issues.
• Generate reports on simulation findings with recommendations.
• Collaborate with cybersecurity teams for analysis.

Skills

Cyber security experience

Breach and attack simulation

Python

PowerShell

Analytical skills

Problem-solving skills

Software development skills

Analytical skills

Tools

Amazon Web Services

G Suite

Office 365

Azure

AttackIQ

Atomic Red Team

Job description

Overview

Our Client, a Banking company, is looking for an Info Security Analyst IV for their Toronto, ON / Hybrid location.

Responsibilities

• Develop and implement a controls assurance strategy structured around the MITRE Telecommunication&CK framework
• Creating realistic attack scenarios based on attacker tactics, techniques, and procedures (TTPs) to test the effectiveness of security controls across various systems and networks.
• Collaboratively identify key security controls, monitor gaps in their implementation, and work closely with relevant teams to remediate identified issues.
• Staying current with industry best practices, emerging threats, and relevant regulatory requirements to ensure a comprehensive understanding of the evolving cybersecurity landscape.
• Collaborate with cyber threat intelligence, threat hunting, and threat detection engineering groups to identify and prioritize key security controls, and gaps, and ensure appropriate alerting feedback.
• Generating comprehensive reports detailing simulation findings, including actionable recommendations for remediation and security posture improvement to relevant stakeholders.
• Collaborate with other members of the cybersecurity team to analyze and interpret the results of simulated attacks.
• Continuously improve and refine the breach and attack simulation process to enhance its effectiveness.
• Make recommendations for security posture improvements based on analysis of breach and attack simulation trends.
• Work with senior analysts and leadership to develop relevant Client dashboards to represent program value.
• Quantify risk reduction due to breach and attack simulation program
• Leverage APIs and automation techniques to integrate Client with other security tools.

Qualifications

• 5+ years of experience in cyber security, with a focus on breach and attack simulation or other offensive security discipline.
• Advanced knowledge of security incident and event management, log analysis, Network traffic analysis, Malware investigation and remediation.
• Experience with cloud infrastructures for the enterprise, such as Amazon Web Services, G Suite, Office 365, and Azure is preferred.
• Strong software development skills, with proficiency in Python, PowerShell, and other relevant languages.
• Familiarity with Breach and Attack Simulation (Client) solutions (e.g., AttackIQ, Atomic Red Team, etc.) and the MITRE Telecommunication&CK framework
• Offensive security skills such as penetration testing or vulnerability assessment.
• Familiarity with MITRE Telecommunication&CK, SIEM, EDR, and security control validation
• Knowledge of common security controls, best practices, and attacker techniques.
• Excellent problem-solving and analytical skills.

Why Should You Apply?

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities

Equal Opportunity

As an equal opportunity employer, ICONMA provides an employment environment that supports and encourages the abilities of all persons without regard to race, color, religion, gender, sexual orientation, gender identity or express, ethnicity, national origin, age, disability status, political affiliation, genetics, marital status, protected veteran status, or any other characteristic protected by federal, state, or local laws.