Analyst, Cyber Security

Brookfield•Gatineau, QC

13d•Onsite

About The Position

As a member of the BSG Cybersecurity team, reporting to the Director of Cyber Security and under the operational direction of the Cybersecurity Manager, the Cyber Security Analyst will strengthen our security operations and protect our cloud-based infrastructure. You will leverage hands-on expertise in Microsoft Azure, Office 365 Security, Exchange Online Protection (EOP), and Microsoft Purview to monitor, detect, and mitigate evolving security threats. This role is pivotal in driving effective incident response and ensuring continuous protection of our information assets.

Requirements

3+ years of experience in Cyber Security or Cloud Security.
Strong knowledge of Microsoft Security solutions, including Azure, Office 365, EOP, and Microsoft Purview.
Hands-on experience with SIEM tools (Microsoft Sentinel preferred).
Familiarity with email security, phishing detection, and incident response practices.
Excellent communication skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders.

Nice To Haves

Knowledge of PowerShell and KQL scripting for security automation is a plus.
Preferred certifications include AZ-500, MS-500, SC-200, CISSP, or CEH.

Responsibilities

Monitor and analyze security alerts from Microsoft Defender, Sentinel, and EOP.
Investigate and respond to phishing, malware, and insider threats.
Conduct forensic analysis and threat hunting using Microsoft Purview and Azure security tools.
Lead incident response efforts by identifying, containing, and eradicating security threats.
Develop and execute incident response playbooks for cloud and email security incidents.
Coordinate with IT and security teams to remediate threats and ensure business continuity.
Document incident findings, perform root cause analysis, and conduct post-incident reviews.
Manage security controls and policies in Microsoft 365 Defender and Azure Security Center.
Ensure compliance with standards such as GDPR, ISO 27001, and NIST through Microsoft Purview Compliance Manager.
Implement and optimize email security policies (EOP, Defender for O365) to minimize phishing risks.
Configure and monitor Azure AD Conditional Access Policies.
Analyze and mitigate risky sign-in activities and MFA bypass attempts.
Secure privileged access using Privileged Identity Management (PIM).
Implement Data Loss Prevention (DLP) policies using Microsoft Purview.
Enforce email encryption, sensitivity labels, and insider risk policies.
Monitor and respond to potential data exfiltration attempts.