Senior Security Analyst - Cloud Security, Information Security

First National Financial LP; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading Canadian mortgage lender seeks a Senior Security Analyst specializing in cloud security. The role involves managing vulnerability assessments, mentoring team members, and collaborating on security architecture. Join a supportive culture with competitive compensation and career advancement opportunities.

Benefits

Competitive compensation

Comprehensive benefits

Hybrid work environment

Training programs

Supportive culture

Community involvement

Social events

Qualifications

• 5+ years of operational security experience.
• Experience with Vulnerability Assessments and Penetration Testing.

Responsibilities

• Lead and mature the Vulnerability Management program.
• Oversee vulnerability assessments and penetration testing.
• Perform security reviews of systems and report deviations.

Skills

Communication

Problem Solving

Critical Thinking

Education

Post-secondary education

Tools

Nessus

Nexpose

Qualys

Nmap

Kali Linux

MS Defender

PowerBI

Job description

Senior Security Analyst - Cloud Security, Information Security

Toronto, ON, Canada

Job Description

First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation, and any other category protected by law.

We support requests for accommodation from applicants with disabilities; please contact Human Resources at [e-mail] if you need an accommodation during the recruitment process.

Reporting To:

Manager and Team Lead, Information Security

Full-Time/Part-Time:

Full-time

Posting Date:

May 2, 2025

Closing Date:

May 16, 2025

Hours of Work:

8:30 a.m. – 5:00 p.m.

Location:

Toronto, ON — steps away from the main public transit station

What we offer:

Highly competitive compensation package including base salary, bonus, benefits, and career advancement opportunities! *Eligibility for benefits depends on employment terms.

The Opportunity:

The Senior Security Analyst will support the Vulnerability Management practice, focusing on cloud security. Responsibilities include identifying and remediating vulnerabilities in First National’s IT infrastructure. Strong communication, problem-solving, and critical thinking skills are essential for managing escalations and conflicting priorities.

How you will contribute:

General

• Lead and mature the Vulnerability Management program with good program management skills.
• Build relationships with internal teams and security leadership.
• Mentor and coach security team members.
• Manage third-party security partners.
• Stay updated on emerging threats to cloud infrastructure.
• Collaborate on designing secure cloud configurations.
• Assess security posture of IT solutions and recommend improvements.
• Evaluate and manage vendors and solutions.
• Perform security assessments and report findings.
• Review security tools and analyze threats.
• Participate in Change Management and security incident response activities.

Vulnerability Management

• Oversee vulnerability assessments, penetration testing, and remediation efforts.
• Develop automation solutions for vulnerability detection and reporting.
• Manage patching activities and compliance.
• Analyze threats and recommend mitigation strategies.
• Use CSPM tools to monitor cloud security posture.
• Report KPIs and security status to leadership.
• Lead projects using insights from Attack Surface Management platforms.
• Coordinate penetration testing and remediation.
• Mentor teams during vulnerability remediation.
• Maintain comprehensive reports on vulnerability management.
• Ensure all IT assets are included in the vulnerability scope.
• Conduct configuration audits for IT assets.
• Supervise certificate management and address security issues.
• Stay current on emerging threats through threat intelligence.

Compliance

• Review firewall rules and guide remediation.
• Support audit processes with necessary evidence.
• Ensure security controls are functioning properly.

Security Assessments / Architecture Review / Threat Modeling

• Perform security reviews of systems and report deviations.
• Maintain and update threat models.
• Assess controls to mitigate security risks.

The experience you need:

• 5+ years of operational security experience.
• Experience with Vulnerability Assessments and Penetration Testing.

Educational Skills and Attributes:

• Post-secondary education and relevant certifications.
• Knowledge of vulnerability assessment, cloud security (Azure), and security tools (Nessus, Nexpose, Qualys, Nmap, Kali Linux, MS Defender).
• Preferred knowledge: Threat modeling, Application Security (OWASP), threat hunting, incident response, firewalls, SIEM, PowerBI.
• Certifications: CEH, CISSP, Security+, OSCP, AZ-900 are advantageous.
• Excellent report writing, analytical, and problem-solving skills.

Working Environment and Physical Demands:

• High-volume periods with tight deadlines.
• Sitting and computer use for extended periods.
• Multitasking, including communication and data analysis.

Additional Benefits:

• Competitive compensation and comprehensive benefits.
• Hybrid work environment.
• Training programs, modern office, supportive culture, community involvement, and social events.

The team you’ll join:

Founded in 1988, First National is a leading Canadian mortgage lender, recognized as a great place to work with high employee engagement.

We thank all applicants; only those selected for interviews will be contacted.