Senior Security Analyst: AI-Enabled Cloud Security

Rates.ca; Toronto; Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Birthday off

Two in-office days per week

Work from Anywhere program

Full employer-paid benefits

RRSP Matching Program

Annual holidays and free lunches

Job summary

Rates.ca is building out a Security Engineering function and seeks an analyst to own hands-on security operations, data protection, vulnerability management, and compliance evidence. The role collaborates with engineers on remediation, defines controls, and contributes to PCI DSS, SOC 2, and NIST CSF evidence programs.

The analyst will monitor alerts across Microsoft Defender XDR, Purview, Cloudflare, and AWS/Azure, tune detections, and produce weekly security metrics.

Qualifications

• 5+ years in security analyst/ops/engineering
• Hands-on cloud platform experience (AWS or Azure) and Microsoft 365 security tooling
• Experience in two of: SIEM/XDR, vulnerability management, DLP, incident response, CSPM
• Familiarity with PCI DSS, SOC 2, NIST CSF, ISO/IEC 27001 or equivalent
• Scripting ability to automate work: PowerShell, Python, or KQL
• Ability to write clearly for engineers and executives
• Comfort with ambiguity and building new processes

Responsibilities

• Monitor and triage alerts across Defender XDR, Entra ID, Purview and Cloudflare to documented outcomes
• Tune detections to reduce false positives and document reasoning
• Create detection content including Sigma rules from real findings
• Support centralised logging and retention with Sentinels/data connectors
• Produce the weekly security operations metrics pack
• Operate Purview data classification and DLP rollout; tune sensitive information types
• Review DLP matches and triage incidents
• Measure false positives and drive improvement
• Run recurring vulnerability scans and cloud posture reviews
• Prioritise findings by exploitability and business impact
• Collaborate with engineering on remediation/testing criteria
• Track findings to closure against SLAs
• Maintain attack surface inventory
• Collect and maintain PCI DSS/SOC 2/NIST CSF evidence
• Support SOC 2 readiness with control narratives and evidence sampling
• Maintain control mapping and update as estate changes
• Assist audits and third-party risk assessments
• Act as first responder for incidents and maintain chain of custody
• Follow incident response playbooks and post-incident reviews
• Join on-call rotations and post-incident reviews
• Ensure incidents yield durable improvements (detections or controls)
• Know guardrails around AI usage and monitor AI implementations
• Ensure AI outputs are reviewable/auditable/defensible
• Own weekly metrics pack and initial DLP tuning
• Close vulnerability findings with engineering squads

Skills

SIEM/XDR operations

AWS/Azure experience

Data loss prevention

PCI DSS/SOC 2/NIST CSF

Scripting: PowerShell/Python/KQL

Tools

Microsoft Purview

Microsoft Sentinel

Cloudflare

Job description

Rates.ca is building out a Security Engineering function and seeks an analyst to own hands-on security operations, data protection, vulnerability management, and compliance evidence. The role collaborates with engineers on remediation, defines controls, and contributes to PCI DSS, SOC 2, and NIST CSF evidence programs.

The analyst will monitor alerts across Microsoft Defender XDR, Purview, Cloudflare, and AWS/Azure, tune detections, and produce weekly security metrics.