Senior Cyber Security Analyst

QuadReal Property Group; Toronto; On-site; CAD 90,000 - 125,000; Full time

Job summary

QuadReal Property Group is seeking a Senior Cyber Security Analyst to monitor, analyze, and respond to security incidents and strengthen security posture across infrastructure, cloud, and network environments.

You will lead vulnerability management, develop incident response playbooks, and drive improvements in security controls, awareness, and governance. Collaboration with cross-functional teams is essential for success.

Qualifications

• Bachelor’s degree in Cybersecurity/CS/IT or equivalent experience.
• 5+ years in incident response, threat hunting, vulnerability management, network security, IAM, and endpoint security.
• Strong experience with SIEM, SOAR, EDR, VM, DLP, and email security tech.
• Knowledge of NIST CSF, OWASP, MITRE ATT&CK.
• Understanding of TCP/IP, DNS, HTTP/S, firewalls, IDS/IPS.
• Industry certs (e.g., Security+, CEH, CISSP) desirable.
• Experience with Azure, AWS, or GCP cloud security.
• IAM knowledge: MFA, SSO, conditional access, RBAC.
• Strong analytical, communication, and problem solving.

Responsibilities

• Investigate security incidents and document findings.
• Collaborate with infrastructure, cloud, networking and app teams.
• Develop incident response playbooks, SOPs and risk assessments.
• Lead vulnerability management lifecycle and remediation.
• Conduct regular vulnerability assessments across endpoints, servers, cloud and network.
• Design phishing simulations and support security training.
• Enforce security policies and standards per NIST/ISO.
• Track security metrics and trends for improvement.
• Monitor third-party cyber risk and drive remediation.
• Build automation to streamline workflows and reduce manual effort.
• Stay aware of threats using MITRE ATT&CK.

Skills

Incident Response

Threat Hunting

Vulnerability Management

Network Security

Identity & Access Management

Endpoint Security

Analytical Thinking

Communication Skills

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

SIEM

SOAR

EDR

Vulnerability Management (VM)

DLP

Email Security

Job description

About QuadReal Property Group

QuadReal Property Group is a global real estate investment, development and operating company headquartered in Vancouver, British Columbia. Its assets under management are $98.5 billion. From its foundation in Canada as a full-service real estate operating company, QuadReal has expanded its capabilities globally for investments in equity and debt in both the public and private markets. QuadReal invests directly through operating platforms in which it holds an ownership interest and via programmatic partnerships.

About QuadReal Property Group

QuadReal Property Group is a global real estate investment, development and operating company headquartered in Vancouver, British Columbia. Its assets under management are $98.5 billion. From its foundation in Canada as a full-service real estate operating company, QuadReal has expanded its capabilities globally for investments in equity and debt in both the public and private markets. QuadReal invests directly through operating platforms in which it holds an ownership interest and via programmatic partnerships.

QuadReal seeks to deliver strong investment returns while creating sustainable environments that bring value to the people and communities it serves. Now and for generations to come.

QuadReal: Excellence lives here.

www.quadreal.com

Role Description

We are seeking a detail-oriented and proactive Senior Cyber Security Analyst to join our growing cybersecurity team. In this role, you will be responsible for monitoring, analyzing, and responding to security incidents, as well as helping to strengthen QuadReal’s overall security posture.

Responsibilities

• Investigate security incidents, perform root cause analysis, and document findings and remediation steps.
• Collaborate with infrastructure, cloud, networking, and application teams during incident response activities.
• Develop and maintain security documentation, including incident response playbooks, SOPs, and risk assessments.
• Support continuous improvement of security processes, prevention, detection and response capabilities.
• Lead the vulnerability management lifecycle, including scanning, validation, prioritization, remediation coordination, and reporting.
• Conduct regular vulnerability assessments across endpoints, servers, cloud environments, and network infrastructure, & work with stakeholders to remediate identified vulnerabilities.
• Design and execute phishing simulation campaigns and support the cyber security training program to improve user awareness.
• Assist in the implementation and enforcement of security policies, standards, and procedures, ensuring alignment with industry standards (e.g., NIST CSF, ISO 27001).
• Track and report on key security metrics and trends to support continuous improvement.
• Continuously monitor third-party cyber risk exposure, ensuring compliance with regulatory and organizational requirements, and drive remediation of identified security risk.
• Build process automation to streamline workflows, reduce manual effort, improve accuracy, enhance operational efficiency, and enable scalable, consistent execution.
• Maintain awareness of emerging threats, attacker tactics, techniques, and procedures (TTPs), leveraging frameworks such as MITRE ATT&CK.

Experience And Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• Minimum of 5 years of hands-ons experience in the following areas: Incident Response, Threat Hunting, Vulnerability Management, Network Security, Identity and Access Management, and Endpoint Security.
• Strong experience with SIEM, SOAR, EDR, VM, DLP, email security technologies.
• Strong knowledge of cybersecurity frameworks and industry standards such as NIST CSF, OWASP, MITRE ATT&CK.
• Solid understanding of TCP/IP, DNS, HTTP/S, and other network protocols, as well as firewall and IDS/IPS technologies.
• Industry certifications such as CompTIA Security+, CEH, CISSP, GSEC, or equivalent are highly desirable.
• Experience with cloud security tools and practices (Azure, AWS, GCP).
• Knowledge of identity and access management (IAM), including MFA, SSO, conditional access, and role-based access control.
• Strong analytical, critical thinking, and problem-solving skills.
• Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical audiences.
• Able to prioritize and execute tasks in a high-pressure environment
• Thrives in collaborative environments and contributes positively to team dynamics

The expected annualized base salary range for this role is $90,000-$125,000.

Based on the position, QuadReal offers a competitive total rewards package in addition to the base pay, which may include a performance-based incentive plan, comprehensive health & dental benefits, pension plan, and paid time off.

The actual salary offered will take into consideration a wide array of factors including, but not limited to, the individual’s skill, experience, education and training, the market compensation of the role, and the consideration to internal equity.

We value diverse experiences and perspectives. Even if your skills don’t align 100% with the listed qualifications or salary range, we encourage you to apply – you may be a great fit for this role or others in our community. Applicants may also be considered for alternative positions within the organization where their qualifications and experience align more closely with available opportunities.

We use artificial intelligence (AI) technology — alongside human review — to assist in screening and assessing applicants for this position. Our recruitment team remains involved in all decisions.

Candidates must be legally authorized to work in Canada as the company does not provide work permit sponsorship for this role.

Note to Recruiters: QuadReal does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to QuadReal, directly or indirectly, will be considered QuadReal property. QuadReal will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for engaged services to submit resumes.

QuadReal Property Group will provide reasonable accommodation at any time throughout the hiring process for applicants with disabilities or for those needing job postings in an alternate format. If you require accommodation, please advise the Talent Acquisition team member you are working with and include the following: Job posting #, your name and your preferred method of contact.