Security Analyst

Vaco Recruiter Services; Toronto; On-site; CAD 96,000 - 110,000; Full time

Job summary

A public agency managing city infrastructure in Toronto is looking for a Security Analyst for a 1-year contract. The ideal candidate has a Bachelor's degree in Computer Science or Information Security along with a minimum of 5 years of experience in Information Security. Responsibilities include executing Threat Risk and Vulnerability Analysis, ensuring PCI-DSS compliance, and managing network security incidents. Come join a collaborative culture committed to diversity and professional growth!

Benefits

Collaborative Culture

Professional Growth

Commitment to Diversity

Impactful Work

Qualifications

• Minimum 5 years of experience in an Information Security role.
• 5+ years of experience administering security products.
• Proven experience with LogRhythm or Splunk solutions.

Responsibilities

• Execute Threat Risk and Vulnerability Analysis and oversee risk remediation activities.
• Ensure adherence to PCI-DSS requirements, managing compliance controls.
• Continuously monitor network traffic and system logs for potential security incidents.

Skills

Information Security

Threat Risk and Vulnerability Analysis

PCI-DSS Compliance

Incident Management

Vulnerability Management

Security Awareness

Education

Bachelor's degree in Computer Science or Information Security

Tools

Palo Alto

CrowdStrike

Cisco ASA

CheckPoint

Microsoft Defender

Qualys/Tenable scanners

LogRhythm

Splunk

Job description

Location: 3 days on-site in Downtown Toronto
Salary Range: $96-110K
12 month contract
About the Company

• This organization is a financially self-sustaining public agency that operates within the municipal sector.

• They are a major player in the city’s transportation infrastructure, managing a large-scale network that contributes significant revenue to the city's general reserves.

• Recognized as a leader in their specific technology services sector, they are integral to supporting the vibrancy and growth of local businesses and residents.

Why Work Here

• Collaborative Culture: The organization strives to be a collaborative, open, transparent, and friendly place to work, built on mutual respect.

• Professional Growth: You will experience professional and organizational growth within a motivated team environment.

• Commitment to Diversity: They are deeply committed to equity, diversity, and inclusion, welcoming applications from all groups with historical barriers to equity.+1

• Impact: You will join a team that prides itself on the calibre of its people and rewards passion for making a significant contribution to the business.

About the Opportunity

• Role Focus: As a Security Analyst (1-Year Contract), you will execute Threat Risk and Vulnerability Analysis (TRVA) and oversee risk remediation activities.

• PCI-DSS Compliance: A major part of the role involves ensuring adherence to PCI-DSS requirements, managing compliance controls, and protecting cardholder data.

• Incident Management: You will continuously monitor network traffic and system logs for potential security incidents and respond promptly to breaches or attacks.+1

• Vulnerability Management: The role requires performing regular vulnerability scans and assessments to address system weaknesses.

• Collaboration: You will work closely with IT and development teams to integrate security requirements into system designs and collaborate with Qualified Security Assessors (QSAs).+1

• Security Awareness: You will design and implement security awareness plans to educate staff on best practices and organizational policies.+1

About You

• Education: Bachelor's degree in Computer Science, Information Security, or a related field.

• Experience: Minimum 5 years of experience in an Information Security role.

• Technical Stack: 5+ years of experience administering security products such as Palo Alto, CrowdStrike, Cisco ASA, Checkpoint, Microsoft Defender, and Qualys/Tenable scanners.

• SIEM Experience: Proven experience with LogRhythm or Splunk solutions.

• Framework Knowledge: Demonstrated knowledge of standards such as PCI-DSS, ITIL, COBIT, ISO/IEC 27000, and SOC 2.

• Forensic Skills: Ability to perform forensic data collections, recovery, and analysis, ensuring proper chain of custody.+1

• Certifications: Relevant certifications (CISSP, CEH, CompTIA Security+, PCI Professional) are considered an asset.