Senior Analyst, Cybersecurity

AIMCo•Edmonton, AB

1d•Hybrid

About The Position

Are you looking for a role with continuous growth and learning opportunity? Do you want to contribute to the financial security of hundreds of thousands of Albertans by ensuring the organization’s data is safeguarded from external information security threats? If this sounds like you, a Security Analyst role might be your next career adventure! Highly successful Security Analysts share many of the same characteristics. They are self-starting, intellectually curious, results focused with exceptional problem solving, analytic and communications skills. They are highly detail-oriented individuals who can spot slight changes in a system’s performance that may indicate a security threat. They are proactive in identifying security risks and creative when implementing protection strategies. In the Technology Platforms & Security team you will need to ensure that all the appropriate safeguards are functioning correctly such as Antivirus, firewalls, IPS/IDS systems, vulnerability assessment systems, and Security Incident Event management systems. The Security Analyst will work to ensure that on a day-to-day basis he or she is aware of the security landscape and is kept abreast of the changing threats to our organization. Working with a number of teams within the organization, this role helps to ensure that the security systems that are in place are operating effectively and efficiently. The successful candidate will be responsible for analyzing, identifying, and mitigating potential cyber security threats and vulnerabilities, as well as implementing data security measures to safeguard the company's information assets. This position is open to candidates who are willing to relocate to Alberta, and we encourage all interested individuals to apply.

Requirements

University degree or diploma in a related field such as Information Technology, Computer Science, Cybersecurity or a related field
5 to 10+ years of working experience information security is preferred.
Completion of or working towards information security certificates (ie. CISSP, SSCP, GIAC, Security+, etc) is advantageous
Basic knowledge of computer networking fundamentals, theory and practice (IPv4, IPv6, routing, switching, OSI model). CCNA level knowledge is highly valuable
Basic knowledge of computer programming (the basics of memory allocation, function calls and process flow control)
Comprehensive understanding of cloud security concepts and best practices
Demonstrated knowledge and application of DevOps Security and best practices.
Proficient technical, analytical, and problem-solving skills
Ability to respond professionally in situations with difficult employee/vendor/customer issues or inquiries while also maintaining confidentiality
Ability to interact and build strong relationships with all levels of the organization and work independently and as a team when needed
Knowledge and discipline to document processes and applications
Ability to handle multiple projects simultaneously within established time constraints
Demonstrates a strong commitment to AIMCo’s core values of excellence, transparency, humility, integrity and collaboration, and inspiring the same in others

Responsibilities

Conduct threat hunting activities and perform continuous monitoring to identify potential cyber security threats and vulnerabilities in the company's systems and networks.
Utilize various security tools and technologies to perform threat analysis and intelligence gathering and maintain an up-to-date understanding of emerging cyber security threats and trends.
Conduct vulnerability assessments and penetration testing to identify weaknesses in our systems on premises and in the cloud.
Conduct risk assessments and provide recommendations for risk mitigation strategies.
Provide guidance and support to junior team members.
Monitoring and responding to information security alerts and incidents. This includes monitoring various security systems including: SIEM, IPS, web and e-mail content filtering and others
Reviewing tickets and changes assigned to the information security team using sound judgment to respond or escalate as required.
Assisting with planning the delivery of security solutions; answering technical and procedural questions and providing guidance as required
Maintaining security by monitoring and ensuring compliance to standards, policies, and procedures
Understanding emerging security practices and standards; keeping abreast of the latest security trends
Performing other operational duties as required on all security related systems for which he/she is responsible.