Security Analyst

Benevity; Vancouver; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Benevity is seeking a Security Analyst to own triage and investigation of security alerts, partner with engineering to fix vulnerabilities, and build resources strengthening defense. The role spans security operations, application security, and security enablement, with AI-assisted workflows and on-call responsibilities.

You will work independently in day-to-day ops while collaborating with senior analysts, leveraging AI tools to accelerate workflows and address AI-related product risks in a

Qualifications

• 3+ years in security operations or related technical role.
• Experience with security tooling across EDR, SIEM, CSPM, WAF, and cloud-native logging.
• Knowledge of networking, OS, and cloud fundamentals.
• Experience using AI tools in a technical context with a critical view on limits.
• Proficiency in scripting (Python, PowerShell, or Bash) and automation.
• Familiarity with MITRE ATT&CK and NIST CSF frameworks.
• Strong analytical and problem-solving skills and clear communication.
• Experience in SaaS/cloud-native/containerized/API environments or relevant certs.

Responsibilities

• Triages, validates, and investigates security alerts across core tooling.
• Maintains incident response playbooks and participates in on-call rotations.
• Conducts threat intelligence research and post-incident reviews.
• Analyzes SAST/ SCA/ DAST findings and communicates remediation context to engineering.
• Assists with threat modeling and architectural reviews early in design.
• Leverages AI tools for faster triage while ensuring safe data handling.
• Identifies AI-specific product risks including prompt injection and model exposure.
• Tracks remediation lifecycles, SLA compliance, and recurring patterns.
• Partners with engineering and fraud teams on investigations and resources.
• Reports on security metrics and evolving process developments.

Skills

Security operations

EDR

SIEM

CSPM

WAF

SAST

SCA

Python

PowerShell

Bash

MITRE ATT&CK

NIST CSF

AI tooling

Education

Security+

CySA+

GCIH

Bachelor's degree in a related field

Tools

Python

PowerShell

Bash

Job description

Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!

Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more! Benevity is looking for a Security Analyst to join our Information Security team in a generalist role spanning security operations, application security, and security enablement. In this position, you will own the triage and investigation of security alerts, partner with engineering teams to fix vulnerabilities, and help build resources that strengthen our overall defense. Working independently on day-to-day operations while collaborating with senior analysts, you will leverage AI tools to accelerate workflows while exploring AI-related product risks. We are seeking a curious, analytical, and continuous learner who thrives on solving puzzles and empowering others to build a safer digital world.

What You’ll Do

• Triage, validate, and investigate alerts across core security tooling (EDR, SIEM, IDS/IPS, CSPM, MDR) to establish scope and determine escalation
• Maintain clear documentation, write incident response playbooks, and participate in an on-call rotation
• Conduct threat intelligence research and contribute to post-incident reviews to drive preventive control improvements
• Analyze SAST, SCA, and DAST findings, providing engineering teams with actionable exploitation context for remediation
• Assist with threat modeling and architectural reviews to catch security risks early in product design
• Leverage AI tools for faster triage and investigation while practicing safe data handling and validating outputs
• Identify AI-specific product risks, including prompt injection, insecure tool use, and third-party model exposure
• Track vulnerability remediation lifecycles, monitor SLA compliance, and report on recurring security patterns
• Partner with engineering and fraud teams on joint investigations, security enablement content, and self-serve resources
• Track and report on key security metrics, trends, and process developments

What You’ll Bring

• 3+ years of experience in security operations, information security, or a closely related technical role
• Hands‑on experience with security tooling across categories such as EDR, SIEM, CSPM, WAF, cloud-native logging, and SAST or SCA
• Solid working knowledge of networking, operating systems, and cloud fundamentals
• Practical experience using AI tooling in a technical context with a thoughtful view on its strengths and limitations
• Scripting proficiency in Python, PowerShell, or Bash, paired with an interest in automating repetitive tasks
• Familiarity with security frameworks such as MITRE ATT&CK and NIST CSF
• Strong analytical and problem‑solving skills with a puzzle‑solving mindset and a drive for verifiable answers
• Clear, inclusive written and verbal communication skills, capable of translating technical concepts for non‑specialists
• A curious, continuous‑learning approach and a collaborative desire to support teammates
• Experience in SaaS, cloud‑native, containerized, or API‑driven environments, or relevant certifications (e.g., Security+, CySA+, GCIH)

Discover your purpose at work

We’re not employees, we’re Benevity-ites. From all locations, backgrounds and walks of life, who deserve more … Innovative work. Growth opportunities. Caring co‑workers. And a chance to do work that fills us with a sense of purpose. If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you’re valued for who you are and challenged to see who you can become … It’s time to join Benevity. We’re so excited to meet you.

Where We Work

At Benevity, we embrace a flexible hybrid approach to where we work that empowers our people in a way that supports great work, strong relationships, and personal well‑being. For those located near one of our offices, while there’s no set requirement for in‑office time, we do value the moments when coming together in person helps us build connection and collaboration. Whether it’s for onboarding, project work, or a chance to align and bond as a team, we trust our people to make thoughtful decisions about when showing up in person matters most.

Join a Company Where DEIB Isn’t a Buzzword

Diversity, equity, inclusion and belonging are part of Benevity’s DNA. You’ll see the impact of our massive investment in DEIB daily - from our well‑supported employee resources groups to the exceptional diversity on our leadership and tech teams. We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we’re committed to creating a culture of belonging with equal opportunities for everyone to shine. That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity. Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to [e-mail].