Security Analyst

Systematix; Toronto; Hybrid; CAD 68,880 - 75,768; Full time

Job summary

Systematix is seeking a Security Analyst to support Ontario Cybersecurity Higher Education, working with universities and colleges across Ontario. You will monitor security controls, triage alerts, correlate events, and aid onboarding, reporting, and automation.

The role is hybrid in Ontario for a 6-month contract-to-hire, 37.5 hours per week, with pay range of CAD 50–55 per hour. Experience with DDoS protection, SOC operations, and network security is preferred, with potential for full-time

Qualifications

• Solid understanding of cybersecurity monitoring and SOC operations.
• Experience with Netscout and Arbor DDoS protection systems.
• Proficiency with TCP/IP networking, routing, switching, NetFlow, BGP and firewalls.
• Familiarity with IT security frameworks (NIST, CSF, ISO27001, etc.).
• Experience with enterprise server platforms, virtualization, and performance monitoring.
• Strong communication and organizational skills.
• Combination of studies, certifications and relevant experience considered.

Responsibilities

• Monitor, detect, analyze, and respond to DDoS attacks across enterprise environments.
• Maintain DDoS monitoring and mitigation appliances, perform health checks and upgrades.
• Investigate network anomalies, volumetric and application-layer attacks, and traffic floods.
• Develop DDoS detection rules, thresholds, baselines, signatures, and automated mitigations.
• Generate real-time traffic analyses and identify malicious patterns and attack vectors.
• Coordinate mitigation with ISPs, CDN providers, cloud security vendors, and internal teams.
• Conduct incident response, triage, containment, recovery, and post-incident analysis.
• Create and maintain DDoS playbooks, documentation, and escalation paths.
• Generate operational and executive security reports on attack trends and risk.
• Proactively hunt threats related to DDoS tactics and campaigns.
• Tune monitoring tools to reduce false positives and improve visibility.
• Collaborate with SOC, Network Ops, Infrastructure, and Cloud teams for resilience.
• Assist with architecture reviews and improve DDoS protection controls.
• Ensure monitoring platforms and DDoS appliances meet standards and SLAs.

Skills

Communication

SOC operations

Netscout

Arbor DDoS

TCP/IP networking

Security frameworks

Server virtualization

Monitoring performance

Certifications/experience

Tools

Netscout

Arbor DDoS

Job description

We are Systematix and we are currently looking for a Security Analyst for our client.

ABOUT THE PROJECT:

Our client is seeking a Security Analyst to support Ontario Cybersecurity Higher Education, working directly with universities and colleges across Ontario.

As a Security Analyst you will be involved in monitoring various network security controls and triaging alerts in order to correlate events, identify threats, prioritize response and notify members of our internal/external Community. You will also be involved in provisioning new members (onboarding), generating activity reports, creation and fine-tuning of alerts and thresholds, maintaining underlying systems infrastructure and ticket management.

Key Activities:

• Monitor, detect, analyze, and respond to Distributed Denial-of-Service (DDoS) attacks across enterprise and internet-facing environments.


• Maintain and administer DDoS monitoring and mitigation appliances, including health checks, tuning, software upgrades, and appliance management.


• Investigate network anomalies, volumetric attacks, application-layer attacks, and traffic floods using Arbor DDoS appliances.


• Develop and maintain DDoS detection rules, alert thresholds, baselines, signatures, and automated mitigation mechanisms.


• Perform real-time traffic analysis to identify malicious patterns, botnet activity, spoofed traffic, and attack vectors.


• Coordinate mitigation activities with ISPs, CDN providers, cloud security vendors, and internal network/security teams during active incidents.


• Conduct incident response activities for DDoS and network-based attacks, including triage, containment, recovery, and post-incident analysis.


• Report incidents proactively and effectively communicate actions taken and required.


• Create and maintain DDoS response playbooks, operational procedures, escalation paths, and technical documentation.


• Generate operational and executive security reports detailing attack trends, mitigation effectiveness and risk exposure.


• Perform proactive threat hunting and analysis related to emerging DDoS tactics, techniques, and attack campaigns.


• Tune monitoring tools to reduce false positives and improve visibility into malicious traffic patterns.


• Collaborate with Security Operations Center (SOC), Network Operations, Infrastructure, and Cloud teams to improve resilience against availability attacks.


• Assist with architecture reviews and recommend improvements for DDoS protection controls and network resiliency.


• Ensure security monitoring platforms and DDoS appliances comply with organizational standards, patching requirements, and operational SLAs.

Knowledge and Skills:

• Good communication and organization skills.


• Good understanding of cybersecurity monitoring and SOC operations.


• Prior experience on Netscout and Arbor DDoS protection systems.


• TCP/IP network knowledge including routing and switching, NetFlow; BGP; firewalls.


• Understanding of one or more IT security frameworks (NIST, CSF, ISO27001, etc.)


• Working knowledge of enterprise server platforms, virtualization and performance monitoring


• Combination of studies, certifications and relevant experience would also be considered.

ABOUT THE ROLE:

Location: Hybrid flexible - Ontario

Duration: 6-month contract-to-hire

Work hours: 37.5 hrs/week

PAY DISCLOSURE:

The average hourly pay range for this field is as follows: $50-$55/hr

This role is intended to convert to a full time, permanent role, following the initial contract engagement

Compensation is commensurate with these standards; exceptions may apply based on experience, skills, and market conditions.

AI DISCLOSURE:

We may use artificial intelligence (AI) or other automated tools to support parts of our recruitment process. No automated tools make hiring decisions.

ABOUT SYSTEMATIX:

Systematix is one of Canada’s largest privately-owned National Consulting and Resourcing firms. With offices across North America, we provide the highest-caliber consulting solutions to a diverse client base that includes all levels of government and private industry sectors.

Systematix is committed to creating a diverse, inclusive environment and is proud to be an equal opportunity employer.

Systematix. Solutions Focused. People Driven.