Junior Cyber Incident Response Analyst

Blumberg Capital Company; Toronto; Hybrid; CAD 68,000 - 95,000; Full time

Benefits offered by this job

Accommodations provided

Hybrid work model

Job summary

Hootsuite is seeking a Junior Cyber Incident Response Analyst to help protect our products, services, and IT infrastructure. You’ll assist in identifying and stopping attacks and help develop and implement technologies, controls, and processes to prevent them.

This hybrid role is open to candidates within commuting distance of our Vancouver or Toronto offices. You will report to the Director, Information Security and join a collaborative, fast-paced security program.

Qualifications

• Degree or diploma in Information Technology, Computer Science or Engineering, with information security certifications; complete or willingness to obtain or equivalent combination of education and experience.
• 1-2 years of experience in a security analyst, SOC analyst, incident response analyst, security engineer, or system administrator or similar role
• Knowledge of common critical network protocols and layer 7 technologies such as SMTP, HTTP, HTTP/S, TLS, DNS, FTP, SSH
• Experience in AWS cloud environment with CI/CD and Unix/Linux
• Familiarity with Ansible and Terraform is a plus
• Some scripting experience (Bash, Python, YAML, PowerShell)
• Fundamental OS knowledge for Mac, Windows, Linux
• Awareness of OWASP Top 10 vulnerabilities

Responsibilities

• Support day-to-day security operations monitoring and response for corporate and customer systems
• Perform incident analysis and triage with network, malware, and de-obfuscation concepts
• Escalate and respond to alerts from MSSP and tools like SIEM, IDS, AV, EDR, WAF, DLP
• Assist Security Incident Response Teams to contain threats
• Execute runbooks to support incident response activities
• Participate in on-call rotation for security incidents
• Other related duties as assigned

Skills

Incident response

SOC experience

Networking fundamentals

AWS cloud

Unix/Linux

Scripting Bash/Python

OWASP Top 10

OS knowledge

Education

Degree in IT/CS/Engineering

Tools

SIEM

EDR

WAF

Job description

Hootsuite’s Security team is looking for a Junior Cyber Incident Response Analyst to assist the team in securing our product, services and IT infrastructure. You’ll work to identify and stop attacks when they occur, and support in developing and implementing technologies, controls, and processes to prevent them. This is a hybrid role and is open to applicants located within commuting distance of our Hootsuite office in Vancouver or Toronto. In this role, you will report to the Director, Information Security.

WHAT YOU’LL DO:

• Support the team in the day-to-day security operations monitoring and response for corporate and customer facing systems
• Perform incident analysis and triage, requiring an understanding of network fundamentals, malware analysis, and de-obfuscation techniques
• Assist in analyzing, escalating, and responding to alerts that originate from our MSSP and other security tools such as SIEM, IDS, Anti-Virus, EDR, WAF, and DLP
• Support in corporate-wide Security Incident Response Teams to contain threats as identified
• Support the technical components of the incident response by executing operational runbooks as required
• Participate in Hootsuite’s security incident on-call rotation schedule
• Perform other related duties as assigned

WHAT YOU’LL NEED:

• Degree or Diploma in Information Technology, Computer Science or Engineering, along with information security certifications ; complete or willingness to obtain or equivalent combination of education and experience
• 1 - 2 years of experience in a security analyst, SOC analyst, incident response analyst, security engineer, or system administrator or similar role
• Knowledge of common critical network protocols and layer 7 technologies such as SMTP, HTTP, HTTP/S, SSL/TLS, DNS, FTP, SSH, and others
• Experience working in a cloud (preferably AWS) environment with CI/CD along with extensive familiarity with Unix / Linux based operating systems
• Familiarity with Ansible and Terraform is an asset
• Some experience with programming or scripting, including Bash, Python, YAML, and PowerShell
• Fundamental understanding of Mac OS, Windows, and Linux operating systems
• Applied understanding of the OSI model, basic networking and analytical aptitude
• Thorough understanding of web and mobile application security vulnerabilities, including but not limited to the OWASP Top 10 list of vulnerabilities
• Understanding of various log formats from a variety of network and computer devices
• Hands on experience with security products, including SIEM, next generation AV, Firewall technologies, Amazon Services
• Collaboration and Teamwork: works with others to deliver results, meaningfully contributing to the team and prioritizing group needs over individual needs
• Creativity and Innovation: seeks new and better ways of doing things, generates original and imaginative ideas, products, or solutions
• Customer Focus: demonstrates a desire to proactively help and serve internal/external customers meet their needs
• Open Communication: clearly conveys thoughts, both written and verbally, listening attentively and asking questions for clarification and understanding
• Problem Solving: uses an organized and logical approach to find solutions to complex problems. Looks beyond the obvious to understand the root cause of problem
• Challenges and supports others to create results but also develop new capabilities. Successfully develops the capacity and capability of team and individuals on the team

WHO YOU ARE:

• Solution seeker: You’re focused on tackling new challenges, solving problems, and moving the business forward—and you don’t wait to be asked.
• Lifelong learner: You have a growth mindset – you’re here to learn, experiment, seek, apply, and provide feedback, share what works with your team, and move on from what doesn’t.
• Resilient adapter: In the face of change and challenges, you bring a thoughtful, calm approach, and a focus on finding the new opportunity.
• Intentional collaborator. You build positive working relationships across the business, bringing people together to foster new opportunities and to facilitate the efficient flow of information.
• Critical challenger: You have the trust in your team to ask difficult questions in order to get to the best end result.
• Active communicator: You listen actively and communicate ideas and information clearly, inclusively, and proactively.
• Integrated thinker: You look beyond your role and responsibilities to understand how your team’s work drives broader organizational goals.
• Accountable owner: You take pride in the work you’re responsible for with a mindset of ultimate accountability and reliability for the outcomes.
• Bar-raiser: You step up to help your team grow and succeed, even when that means going beyond what might be expected.

In all we do, our six guiding principles light the way:

Step Up: Dare to go beyond the expected to achieve greatness. #StepUp

One Team: Make Hootsuite a place we soar together by respecting each other's individuality, building trust, and showing up for the team. #OneTeam #FreeToBeMe

Customer Obsessed: Focus relentlessly on helping our customers succeed. #CustomerObsessed

Go Fast, Be Agile: Widen our competitive advantage by committing to speed and simplicity over perfection and complexity. #GoFastBeAgile

Play to Win: Commit to building an incredible, profitable company for our customers, our employees, and our stakeholders. #PlayToWin #NoExcuses

Neighbours & Allies: Give back to our communities and be an ally. #SocialForGood #Allies

Accommodations will be provided as requested by candidates taking part in all aspects of the selection process.

#LI-Hybrid

Canada Pay Range For This Role

$67,700 — $94,700 CAD

Use of AI in Hiring

Hootsuite uses artificial intelligence (AI) to support our recruitment process. These tools may assist with screening and assessing applicants and / or summarizing interview feedback. All final hiring decisions are made by human decision-makers who use their professional judgement to review and evaluate relevant candidate information in addition to AI outputs. For more information about how we use AI and your rights, please see our Careers Privacy Policy.