Senior Information Security Analyst

IVARI•Toronto, ON

37d•Hybrid

About The Position

The Senior Information Security Analyst, is a senior technical role with full accountability for the day-to-day delivery of ivari’s Security Operations. You will be responsible for the operational oversight of security technologies, processes, procedures, and overall execution of the Security Operations Program. As a valued member of the Security Operations Team, you will participate in Cyber Security Incident Response (CSIR), coordinate responses to security incidents, and facilitate communication with stakeholders, investigative teams, management, as well as system, application, and business owners.

Requirements

5+ years of broad Cyber Security Experience with minimum 1 year in a Sr. Security Analyst or similar role
Bachelor’s degree in a IT related field (Cybersecurity, Computer Engineering or equivalent)
Accumulated Knowledge and hands-on experience of: AD, OU, GPO, SSO, Azure Entra ID, MFA, PAM Microsoft Defender (for Identify, Endpoint, O365 and Cloud), Conditional Access Control, InTune, MDM/MAM Exchange online Protection, mail flow rules, SPF, DKIM, DMARC SEIM, Audit log, incident response and investigations IDS/IPS, CrowdStrike, Tenable, Firewall, WAF, Cloud Proxy and ZTNA PAM, Cloud PKI, CIS Benchmarks
Ability to work independently and as a team
Excellent verbal and written communication skills
Analytical and problem-solving capabilities
Strong organizational skills and attention to detail
Good judgment and understand the need to keep sensitive information confidential

Nice To Haves

IT Security Certifications, such as CISSP, GIAC Forensics, and Incident Handling are considered an asset

Responsibilities

Handle and manage the response and escalation of security events identified through various detection sources, including security technologies, controls as well as our internal Service Desk notifications
Investigate data loss type incidents, network intrusion incidents as well as endpoint malware infections including Ransomware type attacks
Manage responses to alerts from various monitoring systems and platforms to address potentially malicious events in a timely manner
Identify, input, analyze and interpret data to guide decision-making and monitor management policies and practices
Monitor, analyze, and report on vulnerabilities and patching progress
Providing user support and troubleshooting security technology related incidents
Responding, investigating, and escalating alerted events and incidents from various security technologies
Maintaining continuous monitoring of network and end point activities
Analyzing risks, writing reports, and help implement recommendations