SAP Security Analyst securing Government of Alberta ERP systems. Translating business needs into access controls, risk assessments, and enterprise security solutions.
About the role
- Security Analyst protecting Benevity’s social-impact technology platform. Investigating alerts, managing vulnerabilities, and addressing application and AI-related security risks.
Responsibilities
- Triage, validate, and investigate security alerts across EDR, SIEM, IDS/IPS, CSPM, and MDR tooling
- Maintain documentation and write incident response playbooks
- Participate in an on-call rotation
- Conduct threat intelligence research
- Contribute to post-incident reviews and preventive control improvements
- Analyze SAST, SCA, and DAST findings and provide actionable exploitation context to engineering teams
- Assist with threat modeling and architectural reviews
- Use AI tools to accelerate triage and investigation while practicing safe data handling and validating outputs
- Identify AI-specific product risks, including prompt injection, insecure tool use, and third-party model exposure
- Track vulnerability remediation lifecycles and SLA compliance
- Report recurring security patterns, key security metrics, trends, and process developments
- Partner with engineering and fraud teams on investigations, security enablement content, and self-serve resources
Requirements
- 3+ years of experience in security operations, information security, or a closely related technical role
- Hands-on experience with EDR, SIEM, CSPM, WAF, cloud-native logging, and SAST or SCA
- Solid working knowledge of networking, operating systems, and cloud fundamentals
- Practical experience using AI tooling in a technical context
- Scripting proficiency in Python, PowerShell, or Bash
- Familiarity with MITRE ATT&CK and NIST CSF
- Strong analytical and problem-solving skills
- Clear, inclusive written and verbal communication skills
- Curious, continuous-learning approach and collaborative desire to support teammates
- Experience in SaaS, cloud-native, containerized, or API-driven environments, or relevant certifications such as Security+, CySA+, or GCIH
Benefits
- Bonus
- Flexible hybrid work approach
- Opportunities for onboarding, project work, team alignment, and in-person connection
- Growth opportunities
- Innovative work
- Caring co-workers
- Employee resource groups
- Investment in diversity, equity, inclusion and belonging
- Accessible hiring process and accommodations for candidates with disabilities
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.
Application Security Intern securing Kinaxis’s AI - powered supply - chain orchestration platform. Testing applications, managing vulnerabilities, and improving DevSecOps controls in Ottawa.
Threat Intelligence Analyst investigating telecom security threats and customer deployment data for Enea, a global telecom and cybersecurity software company. Supporting client security reviews and threat intelligence operations.
Information Security Analyst governing End - User Computing risks, controls, and remediation for TD, a major North American bank. Advising stakeholders and supporting governance reporting, audits, and regulatory requirements.
IT Security Analyst II coordinating cybersecurity monitoring, MSP oversight, audits, and incident follow - up. Supporting Veristat’s global life - sciences services and regulated technology environments.
Senior compliance analyst supporting Motorola Solutions’ mission - critical communications and analytics security programs. Managing audits, risk assessments, regulatory compliance, and information security governance.
Security Analyst protecting GitLab’s DevSecOps platform through vulnerability triage and CVE operations. Coordinating researchers, customers, and internal teams on secure software response.
SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.