Security Analyst

Canopy Growth Corporation; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

Join a leading company in the cannabis industry as a Security Analyst. This full-time position in Toronto allows you to work with a dynamic cybersecurity team focused on enhancing the security posture through proactive threat monitoring and incident response. Ideal candidates possess strong technical expertise and a passion for cybersecurity.

Qualifications

• 3+ years in cybersecurity operations or network security roles.
• Experience with SIEM, EDR/XDR, IDS/IPS, NAC, firewalls.
• Certifications such as CISSP, CISM, CEH preferred.

Responsibilities

• Monitor, investigate, and respond to security events across SIEM, IDS/IPS.
• Design, deploy, and manage endpoint, network, and cloud security technologies.
• Conduct vulnerability scans and penetration testing.

Skills

Linux

Open-source security tools

Network protocols

Routing

Switching

Perimeter defense

Threat analysis

Documentation

Communication

Problem-solving

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Security

Bachelor’s degree in Engineering

Tools

SIEM

EDR/XDR

IDS/IPS

NAC

Firewalls

VPNs

Vulnerability scanners

Job description

Join to apply for the Security Analyst role at Canopy Growth Corporation.

The Company
At Canopy Growth, our mission is to improve lives, end cannabis prohibition, and strengthen communities. We believe cannabis can be a force for good. We’re building a consumer-centric organization focused on sharing the transformational potential of cannabis through an innovative portfolio of cannabis and hemp-derived products.

Canopy Growth is the world's leading cannabis and hemp company. We value inclusiveness, collaboration, and diversity, with employees from diverse backgrounds working together to drive growth. If you are interested in building global brands, scaling a business, and working in a values-driven environment, we want to hear from you!

The Opportunity
Canopy Growth is seeking a highly motivated and technically proficient Security Analyst to join our Cyber Security & IT Engineering team. This role offers a unique chance for someone passionate about cyber defense to engage in security design and operational threat response.

As part of our cybersecurity team, you will work hands-on with security tools, monitor threats, and lead response activities to maintain a secure environment. Your responsibilities include network and endpoint hardening, threat containment, and enforcing secure practices.

If you're curious, thrive under pressure, and want to make an impact, this role allows you to contribute to our global security posture.

Responsibilities

• Monitor, investigate, and respond to security events across SIEM, IDS/IPS, firewalls, and other telemetry sources.
• Act as an escalation point for security incidents; analyze root cause, assess risk, and drive remediation.
• Participate in incident response planning and execution, including containment, recovery, and reporting.

• Design, deploy, and manage endpoint, network, and cloud security technologies (e.g., firewalls, VPNs, NAC, EDR/XDR, vulnerability scanners).
• Ensure effective deployment and tuning of security tools to reduce noise and improve detection.
• Collaborate with infrastructure and application teams to enforce secure configurations.

• Conduct vulnerability scans, penetration testing, and coordinate remediation efforts.
• Analyze threat intelligence feeds and reports; determine relevance and initiate protective actions.

• Support audit readiness by gathering security evidence and addressing findings.
• Maintain and improve security documentation, policies, procedures, and standards.
• Report on security KPIs and metrics to technical and executive stakeholders.

• Research and recommend improvements to security practices.
• Mentor junior security staff and share knowledge.
• Stay current with cybersecurity trends, tools, and best practices.
• Perform other duties as assigned.

Experience

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field (or equivalent experience).
• 3+ years in cybersecurity operations or network security roles.
• Strong knowledge of Linux and open-source security tools.
• Proficiency in network protocols, routing, switching, and perimeter defense.
• Experience with SIEM, EDR/XDR, IDS/IPS, NAC, firewalls.
• Familiarity with NIST 800-53, NIST CSF, ISO 27001 frameworks.
• Certifications such as CISSP, CISM, CEH, CCNA Security, or Security+ preferred.
• Strong problem-solving, documentation, and communication skills.
• Ability to manage multiple priorities in a fast-paced environment.

Other Details

This is a full-time role based in Canada. We appreciate all applications; only those most suited will be contacted. We encourage applications from people with disabilities; accommodations are available upon request. The successful candidate will undergo background and reference checks.

Additional Information

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology