Security Analyst

Abacus Service Corporation; Regina; On-site; CAD 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm is seeking a Security Analyst in Regina, SK. The successful candidate will manage the security queue and respond to incidents while analyzing risks and developing security awareness campaigns. Experience in network security, incident response, and automation skills in Python or PowerShell are essential. The position requires on-site presence and relevant qualifications in cybersecurity, ideally a Bachelor's degree. Join us to contribute to our efforts in securing sensitive information and enhancing organizational resilience.

Qualifications

• 3-5 years experience in IT sector focusing on cybersecurity or networking.
• Ability to work onsite in Regina, Saskatchewan.
• Experience with penetration testing and ethical hacking is a plus.

Responsibilities

• Manage security queue in ServiceNow and follow incident response processes.
• Analyze threats and communicate risks to business units.
• Develop security awareness campaigns based on trends.

Skills

Network security and protocols (TCP/IP, VPN, firewalls, IDS/IPS)

Security tools and platforms (SIEM systems, antivirus, vulnerability scanners)

Incident response and handling

Scripting and automation skills (Python, PowerShell, Bash)

Risk assessment and management

Compliance awareness (ISO, NIST security frameworks)

Education

Bachelor's Degree in Computer Science, Information Technology, or Cybersecurity

Job description

Security Analyst Abacus Service Corporation • Regina, SK

Security Analyst

Responsibilities

• Managing the security queue in ServiceNow and following incident response processes.
• Analyzing threats and communicating risks to business units.
• Creating and maintaining reporting artifacts (incident reports, HR investigations, stolen/lost equipment reports).
• Compiling/analyzing data for management metrics.
• Developing and executing security awareness campaigns based on trends and needs.
• Responding to security incidents, guiding first responders, and coordinating across business units.
• Conducting root cause analysis of incidents and staying updated on threat trends.
• Executing phishing simulation exercises and tracking/reporting results.
• Managing Privilege Access Management (PAM) requests within defined SLAs via ServiceNow.

Background on CSRMB

• Oversees IT security policy, education, incident response, threat risk assessments, procurement security reviews, and threat/vulnerability evaluation.

Mandatory Qualifications / Requirements

• Candidate must demonstrate experience working in the IT sector within the cybersecurity or networking fields within the past five years.
• Candidate must be able to work onsite at a Government of Saskatchewan office in Regina, Saskatchewan, effective the contract start date.
• All‑inclusive hourly rate cannot exceed $ plus applicable taxes for the contract duration.
• Local Knowledge – GOS is interested in understanding the Resource's experience with GOS or comparable entities, as it relates to the technical and business landscape. Describe in detail.
• Demonstrated working experience with network security and protocols (TCP/IP, VPN, firewalls, IDS/IPS).
• Demonstrated working experience with security tools and platforms (SIEM systems like Sentinel, antivirus, vulnerability scanners).
• Demonstrated working experience with operating systems and platforms (Windows, Linux).
• Demonstrated working experience with incident response and handling, with an ability to detect, investigate, and mitigate security threats.
• Demonstrated working experience with risk assessment and management techniques for evaluating risks and implementing effective security solutions.
• Demonstrated awareness of compliance and regulations such as ISO and NIST security frameworks, privacy legislation, etc.
• Demonstrated working experience with scripting and automation skills (Python, PowerShell, Bash).
• Certifications in networking and/or cybersecurity such as CompTIA Network+, Security+, CISSP, CEH, GSEC are considered assets. Demonstrated working experience with penetration testing and ethical hacking is considered an asset.
• Bachelor's Degree in a related field (Computer Science, Information Technology, Cybersecurity) is considered an asset.

Other Details

• Anticipated Start Date: October , (or ASAP after award)
• Client / Ministry: Government of Saskatchewan (GOS)
• Division: Ministry of SaskBuilds and Procurement – Information Technology Division (ITD)
• Branch: Cybersecurity and Risk Management Branch (CSRMB)
• Location: % on-site in Regina, Saskatchewan, Canada