Security Operation Analyst

Flexspring, Inc.; Quebec; On-site; CAD 80,000 - 110,000; Full time

Benefits offered by this job

Work from home

Paid vacation

Health benefits

Team events

Cutting-edge tech

Competitive salary

Job summary

Flexspring is seeking a Security Analyst to provide continuous security monitoring, detection, and incident response for its cloud infrastructure and iPaaS platform.

You will work closely with the Security & Compliance Lead to close the gap between governance/audit readiness and day-to-day operational security, acting as the frontline eyes on threats while supporting vulnerability management and compliance evidence gathering.

Qualifications

• Bachelor's degree or College Diploma in Information Technology, Computer Security, Computer Science, or equivalent experience.
• Practical experience with security monitoring tools (SIEM, EDR, or equivalent) and incident triage/investigation.
• Working knowledge of vulnerability management processes (scanning, prioritization, remediation tracking).
• Familiarity with cloud infrastructure security fundamentals (AWS preferred): networking, IAM, logging.
• Understanding of compliance frameworks such as SOC 2 and/or ISO 27001.
• Strong analytical and documentation skills; comfortable working through Jira-based ticketing and escalation processes.

Responsibilities

• Monitor security alerting and detection tooling on an ongoing basis; triage, investigate, and escalation confirmed security incidents.
• Own vulnerability management end to end: track findings from scans and tests through remediation with IT Ops, Cloud Engineering, and SRE.
• Maintain and tune detection rules and alert logic to reduce false positives and close monitoring gaps.
• Act as secondary owner for security incident response, following established escalation protocols via Jira.
• Support evidence collection for SOC 2 / ISO 27001 audits where logs, configurations and incident records are required.
• Coordinate with Cloud Engineering and SRE during active incidents to determine root cause and scope.
• Stay current on emerging threats and best practices relevant to cloud infrastructure and SaaS/iPaaS platforms.
• Ensure AI-assisted tooling complies with the Safe Sandbox Policy.

Skills

Security monitoring

Incident triage

Vulnerability management

Cloud security

SOC 2 ISO27001

Jira tickets

Education

Bachelor's degree

College diploma

Tools

SIEM/EDR tools

Cloud IAM

Job description

At Flexspring, you will have the autonomy and flexibility to tackle your role in a way that is right for you. We foster a learning culture that will allow you to develop new skills and progress in your career.

Who We Are

Flexspring is an iPaaS (Integration Platform as a Service) company specializing in HR data integrations. We partner with HR teams and HR software companies to design and deliver custom integrations that connect HR, payroll, and business systems, reduce manual work, improve data accuracy, and help people's operations run more efficiently.

The Role

As our Security Analyst, you will provide continuous security monitoring, detection, and incident response for Flexspring's cloud infrastructure and integration platform. You will work closely with our Security & Compliance Lead to close the gap between governance/audit readiness and day-to-day operational security, acting as the team's frontline eyes on threats while supporting vulnerability management and compliance evidence gathering. You will also serve as the secondary owner for security incident response, ensuring the department is never a single point of failure on security matters.

What You'll Do

• Monitor security alerting and detection tooling (SIEM/EDR) on an ongoing basis; triage, investigate, and escalation confirmed security incidents.
• Own vulnerability management end to end: track findings from scans and penetration tests through to remediation, following up with the relevant technical owners across IT Ops, Cloud Engineering, and SRE.
• Maintain and tune detection rules and alert logic to reduce false positives and close monitoring coverage gaps.
• Act as secondary owner for security incident response, working alongside the Security & Compliance Lead, following the department's established escalation protocols (routed through Jira, no ad hoc direct messaging).
• Support the Security & Compliance Lead with evidence collection for SOC 2 / ISO 27001 audits where operational or technical evidence (logs, monitoring configurations, incident records) is required.
• Coordinate with Cloud Engineering and Integration Support/SRE teams during active security incidents to determine root cause and scope.
• Stay current on emerging threats, vulnerabilities, and security best practices relevant to cloud infrastructure and SaaS/iPaaS platforms.
• Ensure any AI-assisted tooling used for triage or detection complies with Flexspring's AI & R&D Safe Sandbox Policy (read-only service accounts, sandboxed environments, no unauthorized use of customer data).

What You Get

• Work from home with flexible hours.
• 4 weeks of paid vacation annually.
• Comprehensive health benefits package for you and your family.
• Team events and opportunities to connect with colleagues.
• Opportunity to work with cutting-edge technologies.
• Competitive base salary.

What You Bring

Must Have

• Bachelor's degree or College Diploma in Information Technology, Computer Security, Computer Science, or equivalent experience.
• Practical experience with security monitoring tools (SIEM, EDR, or equivalent) and incident triage/investigation.
• Working knowledge of vulnerability management processes (scanning, prioritization, remediation tracking).
• Familiarity with cloud infrastructure security fundamentals (AWS preferred): networking, IAM, logging.
• Understanding of compliance frameworks such as SOC 2 and/or ISO 27001.
• Strong analytical and documentation skills; comfortable working through Jira-based ticketing and escalation processes.

Nice to Have

• Security certifications (Security+, GSEC, GCIH, or equivalent).
• Experience with AWS-native security tooling (GuardDuty, Security Hub, CloudTrail).
• Exposure to SaaS/iPaaS environments or HR technology platforms.
• Scripting/automation experience (Python, or similar) to support detection tuning or reporting.
• Experience supporting external audits or penetration test coordination.

For more information about Flexspring, visit: https://www.flexspring.com/

Equal Opportunity Employer Statement

Flexspring is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Flexspring are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Flexspring does not tolerate discrimination or harassment based on any of these characteristics. Flexspring encourages applicants of all ages.