Information Security Engineering & Operations Analyst

Johnson Financial Group; Yarmouth; On-site; CAD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled Information Security Engineering & Operations Analyst to enhance cybersecurity measures. This role involves engineering solutions to protect against malware and network intrusions, while also managing vulnerabilities. You will collaborate with IT and Managed Detection & Response services to ensure robust security controls and incident response. The ideal candidate will possess a strong educational background in cybersecurity and relevant certifications. Join a diverse and inclusive culture that values your contributions and fosters professional growth in a dynamic environment.

Qualifications

• Bachelor's degree in Information Security or related field is preferred.
• Experience with scripting languages like Python and PowerShell for automation.

Responsibilities

• Build and maintain Information Security controls and respond to incidents.
• Collaborate on improving security processes and automate tasks.

Skills

Microsoft Security Engineering (AZ-500)

Python

PowerShell

Incident Response

Cyber Threat Intelligence

Vulnerability Management

Education

Bachelor's degree in Information Security

Certifications: Microsoft AZ-500, Security+, CEH

Tools

Cybersecurity Monitoring Tools

Identity and Access Management Systems

Job description

Overview

The JFG Information Security Engineering & Operations Analyst plays a key role in engineering and maintaining JFG InfoSec solutions for protecting, detecting, analyzing, hunting for, and reporting on cybersecurity events related to malware, network intrusion, data loss protection and insider threat incidents. This role is also responsible for finding and reporting on internal and external vulnerabilities on JFG systems. This role will be supported by a Managed Detection & Response (MDR) service. Occasional off-hour and weekend work will be expected. Very little (less than 5%) business travel is expected in this role.

KEY RESPONSIBILITIES

• Build, maintain, and work with IT, to ensure Information Security protective and detective controls are properly configured
• Subject Matter Expert (SME) on Microsoft Security Engineering (AZ-500)
• Work with Managed Detection & Response services and JFG IT to detect, analyze, contain, and remediate threats and vulnerabilities across the JFG environment
• Operate and support enterprise identity and access management, privileged access management, user password vault, email security, web security, host security, cloud security, vulnerability management, data loss protection, cybersecurity monitoring, cybersecurity incident response technologies
• Lead and report on incidents involving insider-threat, internal investigations and litigation support activities
• Incorporate Cyber Threat Intelligence into operational threat and vulnerability management reporting
• Operate and support regular user access reviews to ensure appropriate access
• Support weekly/monthly/quarterly/annual operational metrics, reports and dashboards
• Assist with maintaining the Cybersecurity Incident Response Plan
• Collaborate on the continuous improvement of Information Security Engineering & Operations processes, workflows, and procedures (e.g. RunBooks)
• Automate repetitive tasks and drive efficiencies with measurable benchmarks to show progress
• Depending on the experience of the candidate, technical 'team lead' responsibilities may apply to ensure delivery of InfoSec products and services (this is not a people manager position)

JOB REQUIREMENTS

• EDUCATION, CERTIFICATIONS & EXPERIENCE
• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science preferred
• Types of preferred certifications: Microsoft AZ-500, GIAC-GCIH/GCIA/GCFE/GMON/GPEN, Security+, CEH, SSCP, JFG InfoSec Platforms
• Experience with Python and PowerShell scripting languages for automation.

Come as you are.

Our culture embraces diversity, equity, & inclusion; one where everyone feels valued and heard. For more information on JFG's culture and diversity efforts, including our employee resource groups, please visit the Diversity section of our career website.