Senior Information Security Analyst

Fortinet•Burnaby, BC

1d•CA$111,000 - CA$136,000

About The Position

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. The Fortinet Team is looking for an Information Security Analyst to join our Information Security Operation team. It is a highly technical role assisting the Information Security leadership with security testing and evaluation activities.

Requirements

5+ years of dedicated experience in information security role, e.g. security analyst, penetration tester.
Hands-on experience with FortiSIEM, FortiAnalyzer, and FortiSOAR (or equivalent enterprise SIEM and SOAR tools) are required.
Familiar with vulnerability scanning tools such as Nessus, Nuclei or Lacework.
Experience of applying Agentic AI to security operations - designing and deploying AI agents that automate SOC workflows such as alert triage, threat hunting, and response orchestration, accelerating mean-time-to-detect and mean-time-to-respond.
Understanding of the security risks unique to AI systems - prompt injection, insecure agent tool/function calling, model and data poisoning and with the ability to evaluate and test LLM-backed applications.
Strong knowledge of the fundamentals of web applications including authentication, authorization, session management, HTTP protocol, web language, web server and browser architecture and implementation principle.
Proficient programming ability with programming languages in order to conduct security code review and develop scripts and programs to help enrich security scan efficiency and penetration testing automation and dive in-depth ability.
Bachelor's degree in Computer Science, Information Security, Electrical Engineering or related field;

Nice To Haves

A certification in one or more of the following is desirable: NSE, CISSP, CCSP

Responsibilities

Manage the end-to-end vulnerability lifecycle - triage findings from security evaluations and scans, prioritize by risk and exploitability, coordinate remediation with service and engineering teams.
Lead security incident response for Fortinet cloud services - detect, investigate, and contain incidents, coordinate cross-team remediation and recovery, and conduct post-incident reviews to capture root cause and strengthen preventive controls.
Perform regular security compliance assessments - evaluating cloud products and infrastructure against CIS Benchmarks and mapping results to ISO 27001 controls, to identify gaps, document findings, and drive corrective actions.
Participating in design and implementation of an AI based cloud security posture management system, primarily focusing on public IP scan and security exposure analysis.
Collect, analyze threat intelligence and evaluate the risks.