Cybersecurity Student Analyst (Hybrid)

TRIUMF•Vancouver, BC

1d•CA$2,815 - CA$4,238•Hybrid

About The Position

The Cybersecurity Co-op Analyst will support TRIUMF’s cybersecurity operations with a primary focus on developing process workflows, automation, and security configuration improvements. The role emphasizes streamlining security operations, enhancing consistency, and supporting best practices across systems such as Active Directory and endpoint management. TRIUMF is Canada's particle accelerator centre, one of the world's leading laboratories for particle and nuclear physics and accelerator-based science. TRIUMF's diverse community of nearly 600 multidisciplinary researchers, engineers, technicians, tradespeople, staff, and students create a unique incubator for Canadian excellence, as well as a portal to premier global collaborations. Fueling innovation and improving lives, we are committed to accelerating discovery and shaping a better world. Equity, diversity, and inclusion are integral to excellence and enhance our ability to create knowledge and opportunity for all. Together, we are committed to building an inclusive culture that encourages, supports, and celebrates the voices of our employees, students, partners, and the people and communities we serve. TRIUMF’s student program typically hires ~40 students each term from across all disciplines who hang together socially and professionally during the term, and beyond. Our program offers young minds a chance to gather, learn, make new friends, and have fun doing so during their time at TRIUMF. We hold weekly ProD sessions for students which include different activities such as conflict resolution, emotional intelligence, critical thinking, and active listening. Additionally, we hold weekly seminars about the different experiments at TRIUMF, and these talks specifically cater to students. Located on the UBC campus makes it easier for students to make friends, create memories, and explore Vancouver all while working at TRIUMF. TRIUMF’s student program is more than just a place to work, its learning, memories, friendships, exploration, and development all clubbed into one. Come join us to see how we are working to unlock the mysteries of the universe and shape the future. Apply now and be part of our extraordinary journey. Learn more about the amazing research and work we do at TRIUMF. https://www.discoverourlab.triumf.ca http://www.rarestdrug.com

Requirements

Strong interest in automation, scripting, and process improvement in cybersecurity
Experience with or willingness to learn PowerShell (especially for AD/GPO), Python, or Bash
Understanding of Windows environments and Active Directory basics
Familiarity with security best practices and system hardening concepts
Strong analytical and documentation skills

Nice To Haves

Hands-on experience building small-scale automation or monitoring tools.
Exposure to SIEM/EDR solutions (e.g., Sentinel, Splunk, MDE).
Knowledge of vulnerability management, phishing analysis, or incident response processes.
Awareness of frameworks such as MITRE ATT&CK or NIST CSF.
ISC2 Certified in Cybersecurity(CC), CompTIA Security+ or similar certification(s).

Responsibilities

Design and document cybersecurity process workflows to improve operational efficiency and consistency.
Develop automation scripts (Python, PowerShell, Bash) to streamline repetitive security tasks such as alert triage, reporting, and data enrichment.
Review and assess Group Policy Objects (GPOs) against security best practices and recommend improvements.
Assist in implementing and validating secure configurations across systems (e.g., Windows, Intune, endpoint controls).
Support the standardization of security procedures and playbooks.
Analyze system configurations and logs to identify gaps, inefficiencies, or misconfigurations.
Assist with vulnerability management activities, including tracking remediation efforts.
Provide support for phishing investigations and incident triage as needed.
Collaborate with IT and security teams to enforce security baselines and best practices.