Info Security Analyst

Primary Job Title:
Info Security Analyst
Alternate/Related Job Titles:

• Cybersecurity Analyst
• Threat Hunting Analyst
• Security Incident Response Specialist
• Breach and Attack Simulation Analyst
• Cyber Defense Engineer

Location:
Toronto, ON

Onsite Flexibility:
Hybrid — 2 days onsite until November, then 4 days onsite
Contract Details:

• Position Type: Contract
• Contract Duration: 12 months
• Start: 09/15/2025
• End: 09/14/2026
• Pay Rate: C$60 - C$70/hr
• Schedule: Monday to Friday, 9 AM - 5 PM (37.5 hours/week)

Job Summary:
We are seeking a highly skilled Info Security Analyst to provide advanced cyber defense through threat hunting, breach and attack simulation, and security control validation. The analyst will play a key role in improving the security posture of a leading Canadian financial institution, working closely with a pod of 20 team members on evolving security validation programs.Key Responsibilities:

• Develop and implement a controls assurance strategy using the MITRE ATT&CK framework.
• Create realistic attack scenarios simulating advanced attacker TTPs.
• Collaborate with cross-functional teams to identify key security controls and remediate gaps.
• Stay updated with emerging cyber threats and evolving regulatory requirements.
• Collaborate with intelligence, hunting, and detection teams to optimize control coverage.
• Generate detailed reports with actionable remediation recommendations.
• Interpret results of simulated attacks and refine testing processes.
• Recommend security posture improvements and quantify risk reduction through breach simulations.
• Use APIs and automation to integrate simulation tools with other security platforms.
• Develop dashboards to represent program effectiveness and outcomes.

Required Experience:

• 5+ years in cybersecurity with focus on breach and attack simulation or offensive security
• Advanced knowledge of SIEM, log analysis, network traffic analysis, and malware remediation
• Cloud infrastructure experience (AWS, G Suite, Office 365, Azure)
• Hands-on coding in Python and PowerShell
• Familiarity with Breach and Attack Simulation tools (AttackIQ, Atomic Red Team, etc.)
• Offensive security background (penetration testing, vulnerability assessment)
• Familiarity with EDR, SIEM, and validation of security controls

Nice-to-Have Experience:

• Banking or financial services security experience
• Engineering or platform re-engineering exposure

Required Skills:

• Threat hunting and incident response
• Digital forensics and purple teaming
• Python and PowerShell scripting
• Cybersecurity frameworks (MITRE ATT&CK)

Preferred Skills:

• Cloud security practices
• Penetration testing/vulnerability management
• Strong problem-solving and analytical skills
• Clear communication in complex technical environments

Soft Skills:

• Excellent communication (verbal and written)
• Collaboration in international teams
• Strong customer and stakeholder focus

About the Client:
A top 10 bank in Canada and North America offering comprehensive financial solutions. Providing retail, commercial, wealth management, and wholesale banking services, we help clients thrive in today’s evolving market.About GTT:
GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. As a Native American-owned, economically disadvantaged corporation, we highly value diverse and inclusive workplaces. Our clients are Fortune 500 banking, insurance, financial services, and technology companies, along with some of the nation’s largest life sciences, biotech, utility, and retail companies across the US and Canada. We look forward to helping you land your next great career opportunity!Job Number: 25-26061
Hashtags: #gttca