Sr. Cyber Security Analyst

Vermilion Energy; Calgary; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Vacation and flex days

Office environment

Weekly company breakfast

Incentive programs

Top-tier benefits program

Onsite childcare

Volunteer opportunities

Job summary

Vermilion Energy is seeking a Senior Cybersecurity & Operations Specialist to lead complex incident response, investigations and security operations from our Calgary head office.

You will oversee key security platforms, manage vendors, drive continuous improvement in cloud and on‑prem security, and translate cyber risk into actionable business decisions. This role requires Calgary presence and frequent collaboration with global teams.

Qualifications

• CISSP certification and ISC2 membership required.
• Diploma or degree in Cyber Security, IT, CS, or equivalent.
• Extensive cyber security operations experience: detection, escalation, response.
• Strong experience with SIEM and security operations technologies.
• Hands‑on in digital forensics, vulnerability management and risk documentation.
• Strong networking, OS, identity, endpoints and core security knowledge.
• Solid knowledge of on‑premises and Microsoft Azure security controls.
• Experience deploying Microsoft Defender technologies across cloud/hybrid
• Ability to translate cyber risk into actionable business guidance.
• Excellent communication with technical and non‑technical stakeholders.
• Experience managing vendors and multiple priorities.

Responsibilities

• Lead investigations and document complex cyber security incidents.
• Perform digital forensics and analyze logs, alerts and threat intel.
• Improve security monitoring across SIEM, endpoints and cloud
• Oversee SOC/MxDR providers; manage escalations and service reviews.
• Lead threat hunting, vulnerability management and security assessments.
• Strengthen controls across on‑premises and Azure environments.
• Deliver cyber security awareness programs and phishing simulations.
• Translate risks into practical recommendations for teams and leaders.
• Manage security vendors, contracts and initiatives.

Skills

CISSP

Cyber security ops

SIEM

Microsoft Defender

Cloud security

Threat hunting

Incident response

Security governance

Vendor management

Education

Cyber Security degree

Information Technology degree

Tools

Microsoft Sentinel

MxDR

MSSP

Azure Defender

Zscaler

Job description

Meet Vermilion

We responsibly produce essential energy to support local and global needs while delivering long-term value to our people, shareholders, customers, partners and communities. Our people are fundamental to our success. As a global organization,

Meet Vermilion

We responsibly produce essential energy to support local and global needs while delivering long-term value to our people, shareholders, customers, partners and communities. Our people are fundamental to our success. As a global organization,

Excellence, Trust, Respect and Responsibility

are at the core of our vision and central to how we do business. Together, these core values create the foundation for our strong and collaborative culture.

We prioritize health and safety, the environment, and profitability, in that order. Nothing is more important to us than the safety of the public and those who work with us, and the protection of our natural surroundings.

The Opportunity

Are you an experienced Cyber Security professional who can combine technical depth with strong business communication? Do you have experience leading investigations, digital forensics, security monitoring, penetration testing and security awareness programs across on-premises and cloud environments? We are hiring a Senior Cybersecurity & Operations Specialist for our Calgary head office.

You will help protect Vermilion's global information systems by leading complex incident response and investigations, overseeing key security platforms and service providers, and translating cyber risk into clear actions for the business. You will also coordinate the security awareness program, manage security vendors, and drive continuous improvement across security operations, cloud security and defensive controls.

What You Will Do

• Lead the investigation, response and documentation of complex cyber security incidents, working with internal teams, external security providers, vendors and business stakeholders.
• Conduct digital forensic investigations and analyze security alerts, logs, threat intelligence and other evidence to determine the nature, scope and impact of security events.
• Manage and continuously improve security monitoring and detection capabilities across SIEM, endpoint, identity, network and cloud security technologies.
• Oversee SOC, MxDR and other cyber security service providers, including escalations, service delivery reviews and corrective actions.
• Lead threat hunting, vulnerability management, penetration testing and security assessments, partnering with accountable teams to prioritize and remediate identified risks.
• Assess and strengthen security controls across on-premises infrastructure, Microsoft Azure, networks, endpoints, identity platforms and cloud services.
• Plan and deliver the corporate cyber security awareness program, including employee training, phishing simulations, targeted communications and follow-up activities.
• Translate cyber security risks, incidents and priorities into clear, practical recommendations for technical teams, business stakeholders and senior leaders.
• Manage cyber security vendors, contracts and initiatives, coordinating implementation activities, dependencies, risks and stakeholder communications.
• Develop security metrics, incident reports, risk assessments and management updates that support informed decision-making and continuous improvement.
• Maintain cyber security procedures, standards, policies, investigation records and operational documentation.
• Support cyber security governance, information protection, compliance, eDiscovery and litigation-related investigations in partnership with Legal and other stakeholders.
• Stay current on emerging threats, vulnerabilities, regulatory expectations and defensive technologies relevant to Vermilion’s global operations

What You Will Bring

• A current and valid ISC2 Certified Information Systems Security Professional (CISSP) certification and active ISC2 membership. Proof of certification will be required.
• A diploma or degree in Cyber Security, Information Technology, Computer Science or a related discipline, or an equivalent combination of education and practical experience.
• Extensive experience in cyber security operations, including incident detection, escalation, investigation and response.
• Strong experience with SIEM and security operations technologies such as Microsoft Sentinel, and with SOC, MxDR, MSSP or other third-party security providers.
• Hands‑on experience with digital forensics, vulnerability management, security assessments, remediation tracking and formal risk documentation.
• Strong technical knowledge of networking, operating systems, identity, endpoints, firewalls and core security principles.
• Strong knowledge of on‑premises and Microsoft Azure cloud infrastructure and related security controls.
• Hands‑on experience deploying, managing and optimizing Microsoft Defender technologies, including Microsoft Defender for Cloud, across cloud and hybrid environments.
• Demonstrated ability to explain cyber risk clearly, influence practical action and communicate effectively with technical teams, business stakeholders and senior leaders.
• Strong analytical, project management, documentation and reporting skills, with sound judgment when handling sensitive incidents and information.
• Experience managing vendors, initiatives and multiple concurrent priorities.

Additional Experience Considered An Asset

• Experience with cybersecurity governance, information protection, Microsoft Purview, eDiscovery or litigation investigation support.
• Experience with security technologies such as Zscaler, Quorum, Red Canary or Arctic Wolf.
• Experience conducting or supporting security assessments in operational technology environments, including industrial control systems, SCADA or other field-based technologies.
• Additional certifications in areas such as ethical hacking, incident handling, cloud security, threat intelligence or digital forensics.

Other Key Details

• This is an office‑based role requiring presence in Vermilion’s Calgary office five days per week.
• Occasional flexibility outside regular business hours may be required to support Vermilion’s global operations, including meetings or activities involving teams in other countries and time zones.
• Some international travel may be required. The successful candidate must be eligible to travel internationally for business purposes.

What We Offer

• Industry‑competitive time off including vacation, flex days and office closures such as Friday afternoons during the summer
• Casual yet professional office environment with a relaxed dress code
• Opportunities to connect with others, including weekly company‑provided breakfast
• Competitive short‑term and long‑term incentive programs aimed to recognize and reward
• Top‑tier benefits program, including a generous flexible health spending account and savings plan program
• Onsite childcare available (fee‑based)
• Company‑sponsored volunteer opportunities and volunteer grants

Why you’ll love working with us

• We care for each other, the environment and the company, and aim to enrich the communities in which we live and work
• We embrace new solutions across the business, allow space for creativity, and invest in innovation and technology
• We operate with honesty, transparency and fairness, and can be counted on to do what we say we will
• We invest in our employees, providing meaningful work and opportunities for training and professional development
• We have been focused on sustainability for more than a decade
• We are focused on the future: responsibly producing the oil and natural gas that is essential to energy security while exploring alternative energy options

Vermilion is committed to diversity and inclusion, and aims to create a healthy, accessible and rewarding work environment that highlights our employees’ unique contributions to our company’s success. As an equal opportunity employer, we welcome all applications to help us build a diverse workforce that reflects the communities in which we live and work.

Outstanding People. Outstanding Opportunities.