Senior Security Analyst

SAP•Toronto, ON

20h•CA$108,100 - CA$222,800•Hybrid

About The Position

SAP Enterprise Cloud Services is looking for a Senior Security Specialist with a strong technological and security background across the stack. Your focus topic will be Security Incident Response. You will respond to incidents escalated from various sources and will be analysing complex security events targeting customer and company applications, data and systems following both documented procedures as well as industry best practices and creative resolutions. Ideal candidates should be a creative problem solver and quick learner able to adapt quickly to the evolving cybersecurity attack landscape. Further, you will be owning and driving important security topics across all domains for our customers and work with various teams involved in implementation, delivery and operation of cloud services. Furthermore, you will participate in ongoing projects, initiatives, and Security and Compliance Office daily operations.

Requirements

University degree with focus on Cybersecurity or Computer Science, Business Informatics, or related fields
5 years experience in Security Incident Response
Proven expertise in IT security, SAP Basis security, EDR, SIEM, Firewall, WAF, and other related technologies
Knowledge of data analysis techniques
Knowledge of networking and application communication protocols and SIEM technologies and how to utilize that data for traceability back to event source
Ability to work well in a global distributed team as well as independently and have a positive self-motivated can-do attitude
Excellent analytical skills and focus on quality
Strong communication skills in English
Proactive behavior, high willingness to learn and to drive projects

Responsibilities

Investigate security events and incidents
Provide communication and escalation throughout the incident per the Triage guidelines
Communicates directly with stakeholders during high severity events
Hunt for suspicious anomalous activity based on data alerts or data outputs from various toolsets
Perform analysis of log files, asset data and other threat and alert information
Take an active part in the containment of events of interest, even after they are escalated
Handle customer escalations around security end to end
Ensure implementation and execution of security strategy and policy
Evaluate and identify opportunities of potential information security and privacy improvements and drive projects in this area
Work closely with various stakeholders from many initiatives to understand needs, define requirements and translate these into security processes