Security Analyst @ Beovexis Insurance Company of Canada

Cyber Crime; Edmonton; On-site; CAD 70,000 - 110,000; Full time

Job summary

An innovative firm is seeking a skilled Security Analyst to join their team in a hybrid role. This exciting opportunity involves managing information security controls, responding to incidents, and collaborating with IT teams to ensure compliance with security standards. The ideal candidate will have a strong background in incident response, cybersecurity, and a commitment to continuous improvement. You'll be instrumental in reducing operational risks and enhancing the security posture of the organization. If you're passionate about cybersecurity and thrive in a dynamic environment, this role is perfect for you.

Qualifications

• 4+ years of experience in enterprise IT environments or incident response.
• Pursuing recognized information security certifications like CISSP or OSCP.

Responsibilities

• Operate information security controls to reduce operational risks.
• Address IT security incidents and provide timely resolutions.
• Conduct investigations and provide recommendations based on incidents.

Skills

Incident Response

Information Security Principles

Cyber Threat Analysis

Phishing Risk Assessment

Interpersonal Skills

Communication Skills

Education

University Degree in Computer Science

University Degree in Computer Engineering

Tools

Security Tools

Job description

Beovexis is currently searching for a Security Analyst on a permanent/full-time basis for a client in Ottawa.

This role is hybrid and will require someone to go into the office once per week.

The Security Analyst Incident Response's overall role is to operate information security controls, assist IT teams and business users in maintaining compliance with the client's information security standards and policies, and reducing operational risks.

Specific responsibilities include operating security tools and controls, leading or supporting information security incidents resolution, and providing support on information security-related matters to IT and business users. This is an on-call rotating position.

The incumbent will have experience with Information Technology and a solid level of knowledge of Information Security principles. The incumbent will also have experience in one or more of these areas: triaging IT security risks such as phishing or data loss; conducting threat analysis of existing or emerging cyber risk; and/or performing threat hunting to identify existing IT security risks related to systems, applications, and data.

What you'll do

• Operate information security controls in an effective manner to reduce operational risks.
• Address daily requests from IT and business users on security-related matters and take leadership to resolve.
• Take ownership of incidents where applicable and provide summaries and reports to management.
• Ensure adequate and timely resolutions to all audit/review issues assigned to the team.
• Provide the required support to management on matters related to information security.
• React to daily information security incidents and be available on call as required and on a rotational basis.
• Conduct investigations and provide recommendations based on incident outcomes.
• Support implementation of Incident Response-related controls on a continuous basis.
• Adapt to a fast-paced environment.

Requirements

• At least 4 years of experience working in enterprise IT environments and/or incident response, preferably in a large financial institution.
• Demonstrated ability to establish effective working relationships and collaborative work approaches with both internal and external peers.
• Active pursuit or attainment of a recognized information security certification, such as CISSP, OSCP, CIH, CHFI, etc.
• Strong technical skills, knowledge of network protocols and network communication principles, understanding of vulnerabilities and remediation techniques.
• Experience reviewing, analyzing, discussing, explaining, and reporting cyber threats and results.
• Strong interpersonal skills, with the ability to respond to multiple incidents simultaneously and in a prioritized manner.
• Excellent communication skills including preparing briefings, presentations, and oral status reports.
• Triaging security alerts and phishing emails to determine potential risk and assess priority.
• Conduct research and engage internal & external stakeholders to determine potential threat and impact from an existing or emerging threat.

EDUCATION

• University Degree in Computer Science or Computer Engineering.
• Insurance industry-specific background would be an asset.
• A background in information security operations and threat and vulnerability management.