Senior Cybersecurity Analyst

Encore Technical Solutions Inc.; Toronto; On-site; CAD 110,000 - 170,000; Full time

Job summary

Encore Technical Solutions Inc. is seeking a senior security operations professional to own detection and incident response, drive vulnerability remediation, and help shape the organization’s security program.

You will serve as the go-to security expert for IT and business partners while coordinating with cross-functional teams. The role emphasizes hands-on investigations, threat hunts, vulnerability management, and security tooling.

Qualifications

• 5+ years hands-on experience in security operations, incident response or threat management.
• Degree in Computer Science, IT, Information Security or a related field (or equivalent experience).
• Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryption.
• Experience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra ID.
• Cloud security experience in Azure, AWS or GCP; hybrid environments are a plus.
• Scripting skills in PowerShell, Python or similar are an asset.
• Experience in a regulated or enterprise environment is an asset.
• Certifications such as CISSP, CISM, GIAC, SC-200, AZ-500 or CEH are strongly preferred.
• Clear communication, including the ability to explain technical risk to non-technical audiences.

Responsibilities

• Triage and investigate security alerts across endpoint, network, identity and cloud environments.
• Lead investigations into phishing, malware, ransomware, account compromise and insider-risk events.
• Find root causes and coordinate fixes with internal teams and third-party providers.
• Build and refine IR playbooks, runbooks and escalation paths.
• Take part in a shared on-call rotation.
• Track the threat landscape and turn intelligence into improved detections.
• Run proactive threat hunts using available telemetry.
• Recommend practical, risk-based improvements to security controls.
• Run vulnerability scanning and assessments across on-prem, cloud and application environments.
• Work with infrastructure and application owners to prioritize fixes by risk.
• Maintain hardening baselines aligned to CIS, NIST and ISO 27001.
• Report on remediation progress, trends and key metrics.
• Manage and tune the security stack: SIEM, EDR/XDR, IDS/IPS, email security and scanning tools.
• Automate repetitive work through scripting and SOAR-style workflows.
• Evaluate and help roll out new security technologies.
• Support compliance work across PCI DSS, ISO 27001, NIST and Canadian privacy requirements.
• Contribute to audits, risk assessments, control documentation and policy updates.
• Help raise security awareness through training and practical guidance for staff.
• Mentor junior analysts and share knowledge across the team.
• Contribute to the long-term cybersecurity roadmap.
• Partner with infrastructure, cloud, networking, privacy and business teams

Skills

Security operations

Incident response

Threat management

Cloud security

Scripting

Education

Degree in Computer Science / IT / Information Security

Tools

SIEM

EDR/XDR

firewalls

IAM

encryption

Defender XDR

Azure

AWS

GCP

Intune

Entra ID

Job description

Reporting to the Director of Cybersecurity, you’ll be a senior hands-on member of the security team. You’ll own detection and response, drive vulnerability remediation, and help set the direction of the security program. You’ll also be the go-to security expert for IT and business partners across the organization.

What You’ll Do

Detection & Incident Response

• Triage and investigate security alerts across endpoint, network, identity and cloud environments
• Lead investigations into phishing, malware, ransomware, account compromise and insider-risk events
• Find root causes and coordinate fixes with internal teams and third-party providers
• Build and refine IR playbooks, runbooks and escalation paths
• Take part in a shared on-call rotation

Threat Hunting & Risk

• Track the threat landscape and turn intelligence into improved detections
• Run proactive threat hunts using available telemetry
• Recommend practical, risk-based improvements to security controls

Vulnerability Management & Hardening

• Run vulnerability scanning and assessments across on-prem, cloud and application environments
• Work with infrastructure and application owners to prioritize fixes by risk
• Maintain hardening baselines aligned to CIS, NIST and ISO 27001
• Report on remediation progress, trends and key metrics

Security Tooling & Automation

• Manage and tune the security stack: SIEM, EDR/XDR, IDS/IPS, email security and scanning tools
• Automate repetitive work through scripting and SOAR-style workflows
• Evaluate and help roll out new security technologies

Governance & Awareness

• Support compliance work across PCI DSS, ISO 27001, NIST and Canadian privacy requirements
• Contribute to audits, risk assessments, control documentation and policy updates
• Help raise security awareness through training and practical guidance for staff

Leadership

• Mentor junior analysts and share knowledge across the team
• Contribute to the long-term cybersecurity roadmap
• Partner with infrastructure, cloud, networking, privacy and business teams

What You Bring

• 5+ years of hands-on experience in security operations, incident response or threat management
• A degree in Computer Science, IT, Information Security or a related field (or equivalent experience)
• Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryption
• Experience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra ID
• Cloud security experience in Azure, AWS or GCP; hybrid environments are a plus
• Scripting skills in PowerShell, Python or similar are an asset
• Experience in a regulated or enterprise environment is an asset
• Certifications such as CISSP, CISM, GIAC, SC-200, AZ-500 or CEH are strongly preferred
• Clear communication, including the ability to explain technical risk to non-technical audiences
• Strong organization and judgment when juggling competing priorities