Cybersecurity Operations Analyst

Powerex Corp. • Vancouver, BC

1d • CA$109,680 - CA$148,400 • Onsite

About The Position

Powerex Corp., the wholly owned energy marketing subsidiary of BC Hydro, is responsible for marketing clean electricity across North America. Cybersecurity is fundamental to maintaining the reliability, integrity, and availability of the systems that support our business. Our Cybersecurity Operations team protects a complex enterprise environment. We continuously evolve our capabilities to defend against sophisticated cyber threats while enabling the secure adoption of new technologies. We are seeking an experienced Cybersecurity Operations Analyst to join our growing Security Operations team. This role is ideal for someone who enjoys solving complex security challenges, continuously learning, sharing knowledge, and improving cybersecurity capabilities through collaboration, automation, and innovation. The ideal candidate demonstrates technical ownership, sound judgment, curiosity, and initiative in complex security operations environments.

Why Join Powerex?
Protect critical business systems supporting North America's energy markets.
Work alongside a highly skilled cybersecurity team tackling sophisticated threats.
Influence the evolution of enterprise cybersecurity capabilities.
Access opportunities for technical growth, mentorship, and continuous learning.
Comprehensive compensation, pension, and benefits package.

Requirements

• 5+ years of hands-on cybersecurity operations, incident response, detection engineering, or equivalent security operations experience.
• University degree in a technical discipline such as Engineering or Computer Science. A combination of education and other IT/security experience may be considered.
• Demonstrated curiosity, sound judgment, attention to detail, and strong analytical problem-solving skills.
• Ability to work independently while collaborating effectively with technical and business teams.
• Strong experience investigating security events using SIEM, EDR/XDR, identity, network, cloud, and endpoint telemetry.
• Solid understanding of enterprise networking, Windows/Linux systems, Active Directory/Entra ID, Microsoft 365, and common attack techniques.
• Experience developing or tuning detection logic, alerts, dashboards, playbooks, and operational procedures.
• Working knowledge of vulnerability management and risk-based remediation.
• Ability to coordinate incident response with infrastructure, cloud, application, and business teams.
• Strong written and verbal communication skills.
• Must be legally authorized to work in Canada.

Nice To Haves

• Relevant certifications such as GCIH, GCIA, GCFA, CISSP, CISM, Security+, SC-200, AZ-500, CCNA/CCNP Security, or equivalent practical experience.
• Experience with threat hunting, forensic analysis, or advanced incident response.
• Experience with SOAR, scripting, automation, or security orchestration workflows.
• Familiarity with IAM/PAM, EPM, DLP, cloud security, or Microsoft security platforms.
• Experience mentoring junior analysts or contributing to security operations maturity.
• Experience in energy, financial services, regulated industries, or other business-critical technology environments.

Responsibilities

• Investigate, analyze, and respond to cyber incidents across the environment.
• Perform security event correlation using multiple data sources to determine business impact, root cause, and appropriate remediation and mitigation measures.
• Perform proactive threat hunting using behavioral analytics, threat intelligence, indicators of compromise (IOCs), and attacker tactics, techniques, and procedures (TTPs) to identify suspicious or malicious activity.
• Analyze malware-related indicators, network traffic, endpoint telemetry, cloud activity, identity events, and system logs to identify malicious behavior and determine attack methods.
• Coordinate response activities with infrastructure, networking, cloud, application, and business teams to contain and remediate security incidents.
• Develop and maintain incident response plans and procedures, playbooks, and operational documentation.
• Play a key role in the delivery of security operations services across monitoring, threat detection, identity protection, vulnerability management, security analytics, and operational reporting.
• Support, administer, and continuously improve the organization's cybersecurity technologies, including SIEM, EDR/XDR, identity and access management, network security, email security, EPM/application control, cloud services, vulnerability management, security monitoring and analytics, and automation/orchestration platforms.
• Develop, tune, and optimize monitoring rules, detection logic, dashboards, alerts, reports, and use cases to improve visibility and detection coverage.
• Review security events, telemetry, and existing controls to identify opportunities to improve detection capabilities and operational efficiency.
• Validate security configuration changes and ensure cybersecurity controls remain effective.
• Provide cybersecurity operations input on selected technology projects, including review of operational requirements, implementation considerations, and transition into production support. Provide recommendations that align with security best practices, Zero Trust principles, and defense-in-depth strategies.
• Perform or assist with vulnerability assessments, exposure management, security assessments, and audit activities.
• Assist with remediation activities by providing guidance and prioritization recommendations based on business risk, exploitability, asset criticality, and threat intelligence.
• Monitor external intelligence sources, vendor advisories, CERT notifications, and industry reports to identify emerging threats and vulnerabilities, and assess their impact on the organization.

Benefits

• Comprehensive benefits package including extended health, dental, vision, and pension.
• Professional development support, including funding for certifications and training.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level