Security Analyst (ID#4562)

New Value Solutions; Regina; On-site; CAD 65,000 - 95,000; Full time

Job summary

New Value Solutions is seeking a Security Analyst to support enterprise cybersecurity operations in a complex, distributed, and hybrid public-sector environment.

You will monitor security events, investigate incidents, assess controls, and work with network, infrastructure, cloud, identity, endpoint, application, and security teams to protect assets.

The role requires strong security expertise and the ability to communicate findings clearly to technical and non-technical stakeholders.

Qualifications

• Experience supporting enterprise security operations in complex, distributed environments.
• Public-sector/government experience preferred (e.g., Saskatchewan).
• Strong knowledge of firewalls, IDS/IPS, VPNs, proxies, DNS security.
• Ability to communicate technical findings to diverse stakeholders.
• Diploma/degree in Cybersecurity, Network Engineering, CS, or related field.

Responsibilities

• Manage cybersecurity incident tickets and security service requests via ServiceNow.
• Monitor, analyze, and investigate network security events across firewalls, IDS/IPS, proxies, DNS security, and other controls.
• Analyze network traffic, logs, packet captures for indicators of compromise and anomalies.
• Participate in investigations and incident response activities (threat ID, containment, remediation).
• Support the implementation and continuous improvement of network security controls (firewalls, segmentation, VPNs).
• Review firewall rules, ACLs, network configurations for risks and misconfigurations.
• Assess changes for security impact and confirm secure implementation.
• Apply Zero Trust principles and identity-aware security controls.
• Document findings and remediation actions with operational procedures and metrics.
• Prepare operational cybersecurity reports and risk documentation for management.
• Support phishing simulations and security awareness campaigns.

Skills

Enterprise security operations

Network security expertise

Analytical thinking

Troubleshooting

Technical communication

Documentation

Education

Cybersecurity / Network Engineering / CS degree

Tools

ServiceNow

Firewall management

Packet capture analysis

DNS security technologies

Job description

New Value Solutions, a national IT consulting company, is seeking a Security Analyst to support enterprise cybersecurity operations within a complex, distributed, and hybrid public-sector environment. The successful candidate will monitor and investigate network security events, support incident response activities, assess network security controls, and work with technical teams to identify and remediate cybersecurity risks.

The resource will work closely with network, infrastructure, cloud, identity, endpoint, application, and security operations teams to protect enterprise systems and information assets. This position requires strong network security expertise, analytical and troubleshooting skills, and the ability to clearly communicate technical findings to both technical and non-technical

stakeholders.

Responsibilities:

• Manage cybersecurity incident tickets and security service requests through ServiceNow.


• Monitor, analyze, and investigate network security events and anomalies across firewalls, intrusion detection and prevention systems, proxy services, secure web gateways, DNS security technologies, and other network security controls.


• Analyze network traffic, system logs, packet captures, and security alerts to identify indicators of compromise, suspicious communications, unauthorized access attempts, and potential data exfiltration.


• Participate in cybersecurity investigations and incident response activities, including threat identification, containment, remediation, packet capture analysis, and root cause determination.


• Support the implementation, administration, and continuous improvement of network security controls, including firewalls, network access controls, segmentation, VPNs, and secure remote access solutions.


• Review firewall rules, access control lists, network flows, routing paths, network configurations, and security policies to identify risks, misconfigurations, and unauthorized access.


• Assess network changes for potential security impacts and validate that approved changes have been implemented securely and correctly.


• Apply Zero Trust principles, network segmentation, least privilege access, secure remote access, and identity-aware security controls.


• Work with network, infrastructure, cloud, identity, endpoint, application, architecture, and security operations teams to assess and remediate vulnerabilities, configuration gaps, and cybersecurity risks.


• Document network security findings, risk statements, technical recommendations, operational procedures, remediation actions, and incident response activities.


• Prepare operational cybersecurity reports, incident reports, risk-management documentation, security metrics, and updates for management and organizational leadership.


• Support the execution and monitoring of phishing simulation exercises, including user targeting, response tracking, analysis, and reporting.


• Support cybersecurity awareness campaigns and provide security guidance to internal stakeholders.


• Respond to and resolve Privileged Access Management activities and service requests within established service levels.


• Maintain awareness of emerging network threats, attack techniques, vulnerabilities, and security technologies.


• Recommend improvements to security monitoring, threat detection, incident response, and prevention capabilities.


• Explain technical cybersecurity findings, risks, and recommendations clearly to both technical and non-technical stakeholders.

Requirements:

• Experience supporting enterprise security operations within complex, distributed, and hybrid technology environments.


• Experience working with the Government of Saskatchewan or comparable public-sector, government, Crown corporation, or similarly complex and regulated organizations is strongly preferred. This experience should include an understanding of the organization’s technical and business landscape.


• Strong understanding of firewalls, intrusion detection and prevention systems, VPNs, proxy services, secure web gateways, DNS security, load balancers, and network access controls.


• Experience reviewing firewall rules, access control lists, network flows, routing paths, network configurations, and security policies to identify risks, misconfigurations, and unauthorized access.


• Experience analyzing network traffic, logs, packet captures, and security alerts to support threat detection, cybersecurity investigations, and incident response.


• Working knowledge of TCP/IP, routing, switching, VLANs, NAT, DNS, DHCP, VPNs, wireless security, and common network protocols.


• Familiarity with Zero Trust principles, network segmentation, least privilege access, secure remote access, and identity-aware security controls.


• Experience documenting network security findings, risk statements, technical recommendations, operational procedures, and remediation activities.


• Familiarity with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, ISO/IEC 27002, and secure configuration baselines.


• Experience participating in formal change management processes, including reviewing network changes for security impact and validating implementation.


• Experience collaborating with network, infrastructure, cloud, identity, endpoint, application, and security operations teams.


• Strong troubleshooting, analytical, communication, documentation, and problem-solving skills.


• Ability to communicate technical findings clearly to technical and non-technical stakeholders.


• Diploma or degree in Cybersecurity, Network Engineering, Computer Science, Information Systems, or a related field, or equivalent practical experience.


• Professional certifications such as CISSP, CISM, CCNP Security, CCIE Security, Fortinet NSE, Palo Alto PCNSE, Check Point CCSA/CCSE, or CompTIA Security+ are considered assets.


• The consultant must be available to work full-time and 100% onsite at a Government of Saskatchewan office in Regina, Saskatchewan.