Security Analyst

Typical Day in Role:

• Run 3rd party incident handling, refine and improve response playbooks.

• Reporting to Senior Manager, Global Threat Response

• Monitoring 3rd party events – coordinate general cyber security response to news, intelligence notifications

• Working with stakeholders around the globe

• Bridging communication between technical operations teams and globally based business leadership, and demonstrating an understanding of the business risk in doing so

• Compiling and contextualizing investigating data for business consumption

• Guiding team to best practice for incident response

• Solutioning for multiple security domains (Security Management, Security Engineering, Identity and Access Management, etc.).

• Leading complex projects providing security advice to ensure information security risk are mitigated.

Candidate Requirements/Must Have Skills:

1. 10+ years of working experience in IT

2. 3+ years of prior experience in Cybersecurity - hands-on working experience in management of threats and industry

3. 3+ year of incident management experience

4. 3+ years’ experience using productivity tools (PowerBI) to produce quantitative/qualitative reports, data flow diagrams & visual presentations.

Nice-To-Have Skills:

1. Bilingual in Spanish

2. Built and run a TTP framework methodology for pattern and behaviour-based content development

3. Built custom reporting of mitigation status against threats

4. Experience involving red team (Vulnerability Assessments, Web app assessments), consulting (Compliance, policy creation), SOC and Device Management

5. Built a security program to defend against APT

6 Experience having sized, deployed, maintained, and hardened SIEM and NGFW solutions

7. CISSP and/or CISM certification

Soft Skills Required:

• Excellent written, presentation, and verbal communication skills

• Proven ability to quickly learn and understand complex topics and new technologies

• Superior problem solving & decision-making skills to resolve complex work issues

• Ability to work under pressure in a dynamic environment

• Efficient and thorough note taking skills

• Well established organization skills in terms of meeting deadlines and coordinating different work streams of activities

Education:

• Bachelor's degree in a technical field such as computer science, engineering, business, or equivalent work experience

• Certifications (CISSP, CISM, CCSP, CRISC) are an asset