Cyber Security Analyst - Incident Response

2iSolutions Inc.; United States; Remote; CAD 90.000 - 120.000; Vollzeit

Zusammenfassung

2iSolutions Inc. in Canada is seeking a senior IT Security Analyst with strong incident response experience for a permanent full-time role.

The position is mainly remote with 1-2 days onsite per month, offering the chance to influence security across business units. You will lead incident response, develop playbooks, guide teams on security best practices and enforce controls across on-premise and cloud environments, including PCI, PIPEDA, CASL, PHIPA compliance.

Qualifikationen

• 5+ years of experience developing and implementing technology security standards, controls and best practices.
• Experience leading incident response and security control implementations.
• CISSP or CISM or similar designation is an asset.
• CCSP or cloud security certification(s) is an asset.

Aufgaben

• Carry out information technology security plans and policies
• Lead incident response, including steps to minimize the impact, identifying how a breach happened, the extent of the damage and lessons learned
• Guide and advise business units, technology solution delivery, other technology teams and partners on information technology security best practices.
• Identify and assess technology system security requirements at time of procurement, development and implementation of technology projects, identifying risks and implementing controls to mitigate operational risk at launch.
• Recommend, design, develop, test and implement information technology security platforms, tools and controls for on premise and cloud based solutions
• Lead and execute risk treatment remediation plans and tasks
• Maintain information technology security platforms, tools and controls
• Participate in information technology security control assessments and audits for on premise and cloud-based solutions
• Participate in audits of partners, vendors, others in the supply chain and employees focused on determining it they are working within the framework of established policies
• Monitoring regulatory PCI, PIPEDA, internal policy and other compliance
• Support the information technology security awareness training program
• Develop and maintain incident response play books and standard operation procedures

Kenntnisse

Incident response

Information security

Risk assessment

Cybersecurity

Policy development

Security awareness

Ausbildung

Degree or diploma in Information Technology Security or Computer Science

CISSP or CISM or similar designation

CCSP or similar cloud security certification

Tools

SIEM

EDR

EPP

XDR

WAF

DLP

Firewalls

VPN

MFA

Windows/Linux servers

Jobbeschreibung

We are seeking a senior IT Security Analyst with strong experience in incident response for a permanent full time position. This is mainly remote with 1-2 days onsite per month.

Key Responsibilities include:

• Carry out information technology security plans and policies
• Lead incident response, including steps to minimize the impact, identifying how a breach happened, the extent of the damage and lessons learned
• Guide and advise business units, technology solution delivery, other technology teams and partners on information technology security best practices.
• Identify and assess technology system security requirements at time of procurement, development and implementation of technology projects, identifying risks and implementing controls to mitigate operational risk at launch.
• Recommend, design, develop, test and implement information technology security platforms, tools and controls for on premise and cloud based solutions
• Lead and execute risk treatment remediation plans and tasks
• Maintain information technology security platforms, tools and controls
• Participate in information technology security control assessments and audits for on premise and cloud-based solutions
• Participate in audits of partners, vendors, others in the supply chain and employees focused on determining it they are working within the framework of established policies
• Monitoring regulatory PCI, PIPEDA, internal policy and other compliance
• Support the information technology security awareness training program
• Develop and maintain incident response play books and standard operation procedures

Technical:

• Experience with common information security tools and platforms.
• Experience with information security standards including NIST, CIS, OWASP and CSA.
• Experience with PCI, PIPEDA, CASL and PHIPA standards and regulations.

Strong understanding of information security infrastructure and controls including:

• Iaas, PaaS, SaaS security controls and best practices
• SIEM
• EDR
• EPP
• XDR
• SWG
• CASB
• DLP
• Firewall
• WAF
• IDPS
• VPN
• MFA
• AD, AAD, Windows Conditional Access
• Windows and Linux servers
• Networking protocols

Education and Experience:

• Degree or diploma in Information Technology Security or Computer Science
• Minimum of 5 experience developing and implementing technology security standards, controls and best practices
• CISSP or CISM or similar designation is an asset
• CCSP or similar cloud security certification(s) is an asset