Cyber Security Administrator supporting incident response, forensics, and vulnerability management at AltaLink, Alberta’s electricity transmission provider. Coordinating security incidents, assessments, remediation, and vendors.
Responsibilities
Provide operational support to the Cyber Security team, including incident response and internal security operations and protocols
Manage cyber security tickets, including coordination, follow-up, and triage
Coordinate and monitor the cyber security inbox
Respond to computer security incidents by collecting, analyzing, and preserving digital evidence
Support critical security incident response under the direction of senior staff
Support industry-specific threat analyses and generate vulnerability reports
Develop remediation reports and recommendations for compliance and security improvements
Support information security programs and adherence to standards, processes, and best practices
Coordinate with technical teams and third-party vendors to resolve incidents
Communicate response status, resolution, and root cause analysis to stakeholders
Record, action, and track incidents to meet audit and legal requirements
Conduct root cause analyses and identify risk remediation recommendations
Contribute to security assessments of corporate, operations, and EMS systems, services, and programs
Conduct computer and network forensic investigations relating to electronic fraud, identity theft, e-commerce fraud, computer intrusion, information theft, denial of service, organized electronic crime, and financial fraud
Analyze external security information and bulletins to determine applicability to AltaLink
Examine security-device logs, identify root causes, and implement remediation plans
Analyze, report on, and manage vulnerabilities
Perform basic system administration duties and vendor communications for technical support
Perform other essential duties as assigned
Demonstrate behaviors aligned with AltaLink’s cultural pillars
Requirements
Four-year degree in a relevant field preferred or an equivalent amount of post-secondary education and experience
Minimum 1 to 3 years IT experience, including at least 1 year direct Information Security sector experience with a focus on Incident Response
Proven ability/experience in the listed responsibilities
Working knowledge of firewalls, intrusion detection systems, virtual private networking, virus protection technologies, LAN/WAN design, and/or general internetworking technologies
Working knowledge of UNIX, Linux, and Microsoft operating systems, security software and tools
Experience working with software developers and adhering to compliance requirements
Working knowledge of application design reviews and threat modeling
Strong organization and coordination skills
Demonstrated ability to learn new software programs
Certifications given priority: CISSP, CSSLP, SSCP, SANS GIAC, GSECCISSP, CISM, CGEIT, CRISC
Knowledge of information security control frameworks such as NIST CSF 2.0, ISO 27001, PCI, NERC CIP, NEI 08-09, HIPAA, GLBA, CSOX, or other security frameworks
Understanding of risk management practices and security program development, including change management, access control, and physical security
IP network and security understanding including IP routing, quality of service mechanisms, MPLS, and IPsec architectures
Working knowledge of various programming languages
Working knowledge of software development lifecycles (SDLCs)
Effective communication and interpersonal skills to interface with team members and customers
Proven track record of good attendance and performance
Benefits
Extended Healthcare Plan (Medical, Disability, Dental & Vision)
Spending Accounts
Competitive Compensation
Defined Contribution Pension Plan and Group RRSP
Group Life Insurance
Vacation, Earned Time off, Birthdays Off Work and 13 Recognized Holidays
Cybersecurity analyst monitoring threats and strengthening controls for Innergex’s renewable energy operations. Investigating incidents, assessing vulnerabilities, and advising technology teams.
Azure AD Security Analyst leading identity and access management solutions at Intact insurance. Integrating Azure AD, automating operations, and supporting major incidents.
Information Security Analyst protecting cloud, identity, and infrastructure platforms for Alimentiv, a gastrointestinal clinical research organization. Strengthening cybersecurity controls, monitoring threats, and supporting compliance.
Senior Cyber Security Analyst protecting Penn Entertainment’s online gaming, sports betting, and media platforms. Leading incident response, threat detection, automation, and vulnerability remediation.
Senior Systems & Security Analyst owning Azure, enterprise network architecture, and security for Canadian specialty insurer Optiom. Leading infrastructure projects, incident response, and production change coordination.
SAP Security Analyst securing Government of Alberta ERP systems. Translating business needs into access controls, risk assessments, and enterprise security solutions.
Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.