Security Analyst

Compunnel, Inc.; Regina; On-site; CAD 80,000 - 100,000; Full time

Job summary

Compunnel, Inc. is seeking a Network Security Analyst to monitor and investigate security events across firewalls, IDS/IPS, and VPNs. You will support security controls, review configurations, and collaborate with cross-functional teams to remediate risks and respond to incidents.

The role involves analyzing threats, producing reports, and contributing to security awareness initiatives. Experience with ServiceNow is beneficial, with a focus on enterprise security operations.

Responsibilities

• Monitor, analyze, and investigate network security events across firewalls, IDS/IPS, web proxies and related technologies.
• Perform network traffic analysis to identify indicators of compromise and unauthorized access attempts.
• Support implementation and improvement of network security controls including VPNs and NAC.
• Review firewall rules, ACLs, and configurations to enforce least-privilege access.
• Collaborate with architecture, infrastructure and networking teams to remediate risks and gaps.
• Participate in security investigations and incident response activities, including containment and root-cause analysis.
• Maintain awareness of emerging threats and recommend enhancements to detection capabilities.
• Create and maintain operational reporting artefacts and metrics for management.
• Coordinate with CSRM Branch to raise security awareness and respond to decommission requests.
• Proactively researching trends to anticipate security problems and inform stakeholders.

Tools

ServiceNow

Firewalls

IDS/IPS

NAC

VPNs

Job description

JOB SUMMARY

Handling security queue in ServiceNow application to manage security incident tickets and comply with incident response plans and processes to address potential threats.

Key Responsibilities

• Monitor, analyze, and investigate network security events and anomalies across firewalls, intrusion detection/prevention systems (IDS/IPS), web proxies, and other network security technologies.
• Perform network traffic analysis to identify indicators of compromise, suspicious communications, unauthorized access attempts, and potential data exfiltration activities.
• Support the implementation, administration, and continuous improvement of network security controls, including firewalls, network access control (NAC), segmentation, VPNs, and secure remote access solutions.
• Conduct reviews of firewall rules, access control lists (ACLs), and network security configurations to ensure adherence to security standards and least-privilege principles.
• Collaborate with architecture, infrastructure and networking teams to assess, troubleshoot and remediate network security risks, vulnerabilities and configuration gaps or weaknesses.
• Participate in security investigations and incident response activities, including packet capture analysis, threat containment, and root cause determination.
• Maintain awareness of emerging network-based threats, attack techniques, and security technologies, and recommend enhancements to detection and prevention capabilities.
• Creating and maintaining operational reporting artefacts (e.g. Risk Management Decision Item (RMDI), incident reporting, human resource (HR) investigations, lost/stolen reporting, etc.).
• Compiles and analyzes data for management reporting and metrics.
• Coordinating with CSRM Branch to create security awareness campaigns.
• Research proactively regarding needs and trends to anticipate and identify potential security problems/incidents.
• Engaging stakeholders to fulfill their requests (e.g. decommission request, assets decommission executions, etc.).
• Coordinates with other peers in CSRM Branch to research needs and trends to anticipate security problems or incidents.
• Proactively coordinating with appropriate stakeholders across GOS during a security incident – management, security, operations, and others to provide timely and relevant updates to stakeholders and decision-makers.
• Analyzing cyber security incidents to solve issues and suggest improvement in incident response procedures.
• Creating detailed reports and documentation of all incidents and procedures to the CSRM Branch, executive government, and leadership of GOS on a routine basis.
• Supporting the execution and monitoring of phishing simulation exercises, including user targeting, response tracking, and reporting.
• Responding to and resolving Privilege Access Management (PAM) related activities and service requests within defined SLAs using Service Now.

Required Qualifications

Preferred Qualifications

Certifications