Security Analyst

Visionpool Business Services Inc; Regina; On-site; CAD 70,000 - 90,000; Full time

Job summary

A professional services firm is seeking a skilled Security Analyst in Regina, SK. This on-site role involves managing IT security incidents, analyzing threats, and coordinating security awareness. Candidates should have a strong IT background, experience with network security, and relevant qualifications like a Bachelor’s degree in cybersecurity. Competitive pay and a dynamic work environment await the ideal applicant.

Qualifications

• 5+ years of experience in IT sector focusing on cybersecurity or networking.
• Ability to work 100% onsite at Government of Saskatchewan office in Regina.
• Experience with network security protocols (TCP/IP, VPN, firewalls).
• Familiarity with security tools and platforms.

Responsibilities

• Manage security incident tickets and comply with response plans.
• Analyze potential impacts of new threats.
• Create operational reporting artifacts.
• Coordinate security awareness campaigns.

Skills

Cybersecurity experience

Network security knowledge

Incident response expertise

Scripting skills (Python, PowerShell, Bash)

Compliance awareness (ISO 27001, NIST)

Education

Bachelor’s Degree in Computer Science, Information Technology, or Cybersecurity

Tools

ServiceNow

SIEM systems (e.g., Sentinel)

Antivirus software

Job description

Visionpool Business Services is hiring a Security Analyst who will work with a team who manages all things related to IT security. THIS OPPORTUNITY IS LOCATED ON SITE IN REGINA, SK.

Responsibilities:

• Handling the security queue in the ServiceNow application used to manage security incident tickets and comply with incident response plans and processes to address potential threats;
• Analyzing the potential impact of new threats and communicate risks to relevant business units;
• Creating and maintaining operational reporting artifacts (e.g. Risk Management Decision Item (RMDI), incident reporting, human resource (HR) investigations, lost/stolen reporting, etc.);
• Compiling and analyzing data for management reporting and metrics;
• Coordinating with CSRMB to create security awareness campaigns. Research proactively regarding needs and trends to anticipate and identify potential security problems/incidents;
• Responding to computer security incidents according to the security incident response policy and provides guidance to first responders for handling information security incidents;
• Coordinating efforts among multiple business units during security incident response efforts;
• Engaging stakeholders to fulfill their requests (e.g. decommission request, assets decommission executions, etc.). Coordinate with other peers in CSRMB to research needs and trends to anticipate security problems or incidents;
• Assessing security incidents and taking prompt actions in terms of engaging required stakeholders and performing root cause analysis of the incident. Stay updated on information security-related attacks and trends;
• Proactively coordinating with appropriate stakeholders during a security incident – management, security, operations, and others. Provides timely and relevant updates to appropriate stakeholders and decision-makers;
• Analyzing cyber security incidents to solve issues and suggest improvement in incident response procedures. Creates detailed reports and documentation of all incidents and procedures to the CSRMB, executive government, and leadership on a routine basis;
• Supporting the execution and monitoring of phishing simulation exercises, including user targeting, response tracking, and reporting; and
• Responding to and resolving Privilege Access Management (PAM) related activities and service requests within defined Service Level Agreements (SLAs) using ServiceNow.

Qualifications:

Demonstrate experience working in the IT sector within the cybersecurity or networking fields within the past five (5) years.

Must be able to work 100% onsite at a Government of Saskatchewan office in Regina, Saskatchewan, effective the contract start date.

Demonstrated understanding and experience with GOS, or comparable entities, as it relates to the technical and business landscape.

Demonstrated working experience with network security and protocols (TCP/IP, VPN, firewalls, IDS/IPS).

Demonstrated working experience with security tools and platforms (e.g. SIEM systems like Sentinel, antivirus, vulnerability scanners).

Demonstrated working experience with operating systems and platforms (Windows, Linux).

Demonstrated working experience with incident response and handling with an ability to detect, investigate, and mitigate security threats.

Demonstrated working experience with risk assessment and management techniques for evaluating risks and implementing effective security solutions.

Demonstrated awareness of compliance and regulations such as ISO 27001 and NIST security frameworks, privacy legislation, etc.

Demonstrated working experience with scripting and automation skills (e.g. Python, PowerShell, Bash).

Certifications in networking and/or cybersecurity such as CompTIA Network+/Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)

Demonstrated working experience with penetration testing and ethical hacking is considered an asset.

Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity