Analyst, Cyber Security

About This Opportunity

We are recruiting a Cybersecurity Analyst to join our Cybersecurity team. In this role, you will be responsible for safeguarding our organization’s digital assets and infrastructure from potential security threats and vulnerabilities. You will work closely with cross-functional teams to design, implement, and monitor security measures that protect the organization’s network, systems, and data from cyberattacks, ensuring the ongoing safety and compliance of the organization's infrastructure technology & operational technology environments.

Responsibilities

• Monitor network traffic for unusual activity and potential threats.
• Investigate and respond to security breaches.
• Develop and execute incident response plans to mitigate damage.
• Partner with other teams and security teams to ensure comprehensive protection of the organization.
• Lead complex security investigations and coordinate incident response across IT and OT environments.
• Perform advanced threat hunting activities using SIEM, EDR, and other telemetry sources.
• Conduct deep-dive forensic analysis on compromised hosts, networks, and logs to determine root cause and impact.
• Work closely with MSSP partners on Tier 1 and Tier 2 escalations and take ownership of Tier 3 incidents.
• Utilize threat intelligence feeds to assess relevance and proactively defend against emerging threats.
• Develop detection rules, automation scripts, and custom threat indicators.
• Maintain incident response runbooks and contribute to continuous improvement of response processes.
• Work closely with OT engineering, IT infrastructure, and cloud security teams to ensure comprehensive coverage.
• Perform red/blue team simulations and tabletop exercises to improve detection and response capabilities.
• Participate in vulnerability triage and risk impact analysis for critical assets.
• Document incidents thoroughly for lessons learned, compliance, and reporting purposes. 

Qualifications

• College diploma and/or degree in cybersecurity, computer science, or a related field.
• Relevant certifications such as GCFA, GNFA, GREM, GCIH, CEH, Comp TIA Security++ or Microsoft SC200/AZ500 are an asset.
• 2+ years of experience in Tier 2/3 cybersecurity incident response and forensics.
• Knowledge of threat hunting, digital forensics, and malware analysis.
• Experience working in or supporting OT environments (ICS/SCADA, PLCs, HMIs) is an asset.
• Familiarity with security operations tools: SIEM (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike, Defender), forensic tools (e.g., EnCase, Volatility).
• Proficiency in scripting (Python, PowerShell) and automation of response actions.
• Knowledge of attack frameworks (MITRE ATT&CK for Enterprise and ICS).
• Strong understanding of threat intelligence platforms, IOC enrichment, and TTP analysis.
• Excellent analytical, communication, organization and documentation skills.
• Analytical Thinking: Ability to analyze complex problems and develop effective solutions.
• Attention to Detail: Being meticulous in monitoring systems and identifying potential threats.
• Communication: Clearly conveying security policies and procedures to non-technical staff.
• Problem-Solving: Quickly and effectively address security incidents.
• Continuous Learning: Staying updated with the latest security trends and technologies.

#LI-JB1
#CBSAS