Senior Information Security Analyst

StackAdapt; Ottawa; Remote; CAD 110,000 - 160,000; Full time

Job summary

StackAdapt is seeking a Senior Information Security Analyst to build and maintain the security monitoring program, lead incident response, mentor junior analysts, and oversee telemetry analysis across the org. You will drive major investigations, perform forensic analysis, and guide threat intelligence and governance activities.

You will collaborate with InfoSec and engineering teams to resolve incidents, communicate findings to leadership, and assist auditors with control evidence in a

Qualifications

• Experience performing threat hunting to identify malicious activity and risk.
• Proven incident response, digital forensics and security operations expertise.
• Ability to mentor mid-level and junior analysts and share best practices.
• Strong in examining Windows, Linux and MacOS hosts for IOC indicators.
• Excellent communication with stakeholders at varying levels of technical knowledge.
• Familiarity with SIEM, EDR, SOAR, vulnerability scanning and email gateways.
• Experience with cloud services (AWS/Azure/GCP) is beneficial.

Responsibilities

• Perform threat hunting to identify risks before incidents occur.
• Provide technical leadership and mentorship on detection and response.
• Analyze logs and alerts from endpoints, cloud resources, and networks.
• Stay informed on emerging threats via threat feeds and risk assessors.
• Document procedures, response plans and playbooks for the team.
• Develop and deliver security awareness training for staff.
• Lead major incident response operations and forensics investigations.
• Advise internal teams on technical and forensic matters.
• Support assurance of internal controls and processes for clients.
• Assist compliance efforts with evidence of key controls for auditors.

Skills

Threat hunting

Incident response

Mentorship

Security operations

Communication

Cloud security

Digital forensics

Tools

SIEM

EDR

SOAR

Vulnerability scanning

Email security gateways

Internet proxies / gateways

Cloud platforms (AWS/Azure/GCP)

Job description

StackAdapt is the leading technology company that empowers marketers to reach, engage, and convert audiences with precision. With 465 billion automated optimizations per second, the AI-powered StackAdapt Marketing Platform seamlessly connects brand and performance marketing to drive measurable results across the entire customer journey. The most forward-thinking marketers choose StackAdapt to orchestrate high-impact campaigns across programmatic advertising and marketing channels.

As a Senior Information Security Analyst, you will play a key role in establishing, guiding, and maintaining StackAdapt’s security monitoring program and overall defense posture. You will safeguard digital assets, lead incident response efforts, mentor junior team members, and oversee security operations and telemetry analysis across the organization.

You will drive major security investigations, direct root cause analysis for complex incidents, and architect preventative frameworks to mitigate future threats. In addition, you will spearhead threat intelligence initiatives, reporting security metrics to leadership and engineering teams to support strategic risk management and mitigate emerging cyber threats.

You will collaborate with members of the Information Security Team and wider engineering teams for the investigation and resolution of information security events / incidents to ensure that these are managed in a timely and effective manner.

StackAdapt is a 'Remote First' company, therefore we are open to candidates located anywhere in North America for this position.

What you'll be doing

• Performing threat hunting activities in order to identify malicious activity, as well as identifying and mitigating risks before cyber incidents occur.
• Providing technical leadership, mentorship, and guidance to mid-level and junior Security Analysts on threat detection, incident response, and security best practices.
• Analyzing logs and alerts from a wide range of sources in order to identify evidence of malicious activity, including logs and alerts generated from user endpoints, cloud-based resources, email logs, internet traffic, etc.
• Regularly assessing security threat feeds to stay informed on emerging threats and vulnerabilities, as well as continually assessing the level of risk posed to StackAdapt.
• Documenting key activities, procedures, response plans and playbooks, as well as disseminating key procedural information to other members of the Information Security Team.
• Preparing and delivering security awareness training material for staff with varying backgrounds and domain knowledge.
• Leading major incident response operations and technical forensics investigations, serving as an escalation point and directing containment and remediation strategies.
• Providing specialist advice and guidance to internal teams on technical and forensic matters.
• Supporting efforts to provide assurance about internal security controls and processes to clients.
• Supporting StackAdapt's continuous efforts to meet compliance requirements, for example detailing and evidencing key security controls and mechanisms to external auditors.

What we're looking for

• Experience analyzing logs and alerts from a wide range of sources in order to identify evidence of malicious activity.
• Experience working effectively in cross-functional teams with both business and technical stakeholders.
• Experience working in incident response, digital forensics and/or security operations.
• Skilled in examining Window, Linux, and MacOS hosts for indicators of compromise (IOCs), including forensic acquisition and analysis of data from endpoints.
• Strong communication skills and an ability to influence senior stakeholders, as well as an ability to communicate information to audiences with varying backgrounds and domain knowledge.
• Knowledge of different cyber security solutions and toolsets is beneficial (e.g. SIEM, EDR, SOAR, vulnerability scanning, email security gateways, internet proxies / gateways, etc.).
• Exposure to simulated real-world cyber attacks (i.e. 'Red Teaming' exercises) is beneficial.
• Experience with cloud computing services is beneficial (e.g. AWS, Azure, GCP, etc.).
• Experience creating, maintaining and delivering training and awareness material.