Security Analyst

Benevity; Calgary; Hybrid; CAD 70,000 - 110,000; Full time

Job summary

Benevity is seeking a Security Analyst to join the Information Security team in a generalist role across security operations, application security, and enablement. You will triage alerts, partner with engineers to fix vulnerabilities, and help build resources to strengthen defense, using AI tools to accelerate workflows while assessing product risks.

You will collaborate with senior analysts, contribute to post-incident reviews, and drive preventive controls.

Qualifications

• 3+ years in security operations or a closely related technical role.
• Hands-on experience with tooling across EDR, SIEM, CSPM, WAF, cloud-native logging, and SAST or SCA.
• Solid knowledge of networking, operating systems, and cloud fundamentals.
• Practical AI tooling experience in a technical context with a thoughtful view on strengths and limits.
• Scripting proficiency in Python, PowerShell, or Bash with an interest in automation.
• Familiarity with MITRE ATT&CK and NIST CSF.
• Strong analytical and problem-solving skills with clear communication.
• Experience in SaaS, cloud-native, containerized, or API-driven environments; relevant certifications.

Responsibilities

• Triage, validate, and investigate alerts across security tooling to establish scope and escalation.
• Maintain documentation, write incident response playbooks, and participate in on-call rotations.
• Conduct threat intelligence research and contribute to post-incident reviews to drive preventive controls.
• Analyze SAST, SCA, and DAST findings and provide actionable remediation context.
• Assist with threat modeling and architectural reviews to catch security risks early.
• Leverage AI tools for faster triage and investigation while ensuring safe data handling.

Skills

Security operations

Incident response

Threat intelligence

Python/Powershell/Bash

MITRE ATT&CK

NIST CSF

Cloud fundamentals

AI tooling experience

SaaS/cloud-native

Education

Security certifications (e.g., Security+, CySA+, GCIH)

Tools

EDR

SIEM

CSPM

WAF

SAST

SCA

Job description

Meet Benevity

Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We're also one of the first B Corporations in Canada, meaning we're as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!

Benevity is looking for a Security Analyst to join our Information Security team in a generalist role spanning security operations, application security, and security enablement. In this position, you will own the triage and investigation of security alerts, partner with engineering teams to fix vulnerabilities, and help build resources that strengthen our overall defense. Working independently on day-to-day operations while collaborating with senior analysts, you will leverage AI tools to accelerate workflows while exploring AI-related product risks. We are seeking a curious, analytical, and continuous learner who thrives on solving puzzles and empowering others to build a safer digital world.

What You'll Do

• Triage, validate, and investigate alerts across core security tooling (EDR, SIEM, IDS/IPS, CSPM, MDR) to establish scope and determine escalation
• Maintain clear documentation, write incident response playbooks, and participate in an on-call rotation
• Conduct threat intelligence research and contribute to post-incident reviews to drive preventive control improvements
• Analyze SAST, SCA, and DAST findings, providing engineering teams with actionable exploitation context for remediation
• Assist with threat modeling and architectural reviews to catch security risks early in product design
• Leverage AI tools for faster triage and investigation while practicing safe data handling and validating outputs
• Identify AI-specific product risks, including prompt injection, insecure tool use, and third-party model exposure
• Track vulnerability remediation lifecycles, monitor SLA compliance, and report on recurring security patterns
• Partner with engineering and fraud teams on joint investigations, security enablement content, and self-serve resources
• Track and report on key security metrics, trends, and process developments

What You'll Bring

• 3+ years of experience in security operations, information security, or a closely related technical role
• Hands-on experience with security tooling across categories such as EDR, SIEM, CSPM, WAF, cloud-native logging, and SAST or SCA
• Solid working knowledge of networking, operating systems, and cloud fundamentals
• Practical experience using AI tooling in a technical context with a thoughtful view on its strengths and limitations
• Scripting proficiency in Python, PowerShell, or Bash, paired with an interest in automating repetitive tasks
• Familiarity with security frameworks such as MITRE ATT&CK and NIST CSF
• Strong analytical and problem-solving skills with a puzzle-solving mindset and a drive for verifiable answers
• Clear, inclusive written and verbal communication skills, capable of translating technical concepts for non-specialists
• A curious, continuous-learning approach and a collaborative desire to support teammates
• Experience in SaaS, cloud-native, containerized, or API-driven environments, or relevant certifications (e.g., Security+, CySA+, GCIH)

Discover your purpose at work

We're not employees, we're Benevity-ites. From all locations, backgrounds and walks of life, who deserve more ... Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose. If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you're valued for who you are and challenged to see who you can become ... It's time to join Benevity. We're so excited to meet you.

Where We Work

At Benevity, we embrace a flexible hybrid approach to where we work that empowers our people in a way that supports great work, strong relationships, and personal well-being. For those located near one of our offices, while there's no set requirement for in-office time, we do value the moments when coming together in person helps us build connection and collaboration. Whether it's for onboarding, project work, or a chance to align and bond as a team, we trust our people to make thoughtful decisions about when showing up in person matters most.

Join a Company Where DEIB Isn't a Buzzword

Diversity, equity, inclusion and belonging are part of Benevity's DNA. You'll see the impact of our massive investment in DEIB daily - from our well-supported employee resources groups to the exceptional diversity on our leadership and tech teams. We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we're committed to creating a culture of belonging with equal opportunities for everyone to shine. That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity. Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to [e-mail].