Security Analyst

MSP OPERATIONAL CORP•Richmond Hill, ON

26d•CA$80,000 - CA$90,000•Hybrid

About The Position

As a Security Analyst, you will be responsible to work with clients to help them develop and maintain a security strategy and implement controls, policies, and procedures that follow the Centre for Internet Security (CIS) and other security frameworks. This is achieved using a project-based methodology as well as delivering recurring services. The goal is to continually improve customers’ security maturity and posture while providing trusted guidance and ongoing value.

Requirements

5+ years' experience in a similar role.
3+ years’ experience in a consulting role.
Class 5 Drivers License and access to vehicle an asset.
Experience delivering penetration tests and vulnerability scans.
Experience developing and evaluating security policy and procedure documentation.
Experience with application control (I.e. Defender, Threat Locker).
Experience with endpoint detection and response (I.e. Defender for Endpoint, Sentinel One).
Experience with endpoint management with a focus on security (I.e. Intune, SCCM).
Experience with firewall technologies and their security features.
Experience with hardening systems (I.e. firewalls, operating systems).
Experience with identity and multifactor providers (I.e. Duo, Entra).
Experience with Microsoft products including all recent versions of Windows Client/Server, Exchange, SQL, OneDrive, SharePoint, and Teams.
Experience with mobile device management platforms (I.e. JAMF, Intune).
Experience with patching vulnerabilities.
Experience with responding to security alerts and incidents (I.e. SIEM/SOC, Incident response).
Experience with securing remote access technologies.
Experience with security awareness training platforms (I.e. Breach Secure Now, Know Be 4).
Experience working in Remote Monitoring and Management and ticketing applications.
High comfort level with engaging, educating, and sharing knowledge with customers.
Maintaining calmness and clear, factual communication during stressful events.
Thorough knowledge of Active Directory and Group Policy.
Thorough knowledge of security frameworks (I.e. CIS/ISO/NIST/PCI/SOC2)
Understanding of networking from a security perspective (protocols, segmentation).
Understanding of Project Management best practices.

Nice To Haves

ISACA (CISA, CISM) and ISC2 (CC, CGRC, CISSP, CCSP) certifications are an asset and preferred.
Microsoft certifications in Azure and Microsoft 365 security and compliance are an asset and preferred.

Responsibilities

Architect, plan, implement, and manage all aspects of CIS/ISO/NIST/PCI/SOC2 and Azure/Microsoft 365 security related effort and engagements.
Take on escalated tickets specific to security related issues when approved by the customer.
Timely management of balancing priorities and your schedule.
Participate in Pre-Sales discovery and requirement gathering sessions to develop scopes of work.
Participate in virtual and in-person customer facing meetings.
Plan and deliver security controls, policies, processes, and roadmaps.
Plan and deliver virtual information security officer meetings.
Research, evaluate and report on emerging cyber security threats and vulnerabilities.