Application Security Intern securing Kinaxis’s AI - powered supply - chain orchestration platform. Testing applications, managing vulnerabilities, and improving DevSecOps controls in Ottawa.
About the role
- Security Analyst at EXFO monitoring threats and responding to incidents for IT systems. Collaborating with IT teams to enhance cybersecurity measures with diverse client environments.
Responsibilities
- Participate in implementing the cybersecurity protection, detection, and response plan for the company's IT systems.
- Serve as the primary point of contact for the Security Operations Center (SOC): monitor alerts, coordinate remediation actions, and escalate when necessary.
- Lead the handling and resolution of security incidents, intervening directly on systems when required.
- Develop remediation plans based on technical audit findings and track them through to implementation.
- Actively contribute to patch deployment, configuration of security solutions, and improvement of existing controls.
- Maintain continuous monitoring of threats and cybersecurity trends to anticipate emerging risks.
- Create and maintain an operational security dashboard.
- Integrate security requirements into IT projects by providing expertise from the design phase.
- Advise teams and staff on cybersecurity best practices to minimize risk and ensure compliance with applicable standards.
- Contribute to security awareness and training efforts for internal stakeholders.
- Participate in updating the risk mapping and propose appropriate corrective actions.
- Contribute to formalizing and updating operational security guidelines and procedures.
- Support IT leadership in monitoring security posture and preparing periodic reports.
Requirements
- 3 to 5 years of experience in cybersecurity, particularly in incident management, risk analysis, and security operations.
- Strong technical skills enabling direct intervention on systems and security solutions when necessary.
- Good knowledge of security standards and frameworks (NIST, ISO 27001, CIS, etc.).
- Ability to translate technical concepts into clear language and support IT and business teams in implementing protective measures.
- Excellent communication skills and cross-functional collaboration.
- Ability to manage priorities and adapt to a constantly evolving environment.
- Operational experience with endpoint protection and threat detection solutions (EDR/XDR) — required.
- Hands-on experience with a vulnerability management platform — required.
- Functional knowledge of a SIEM, including creating detection rules and investigating alerts; proficiency in a query language (e.g., KQL or equivalent) is an asset.
- Experience administering and analyzing network security solutions (firewalls, VPNs, DNS filtering, network access control).
- Knowledge of identity and privileged access management principles (IAM/PAM).
- Strong familiarity with cloud collaboration and productivity environments (email, managed workstations, mobile device management).
- Knowledge of Active Directory environments and associated attack vectors.
- Scripting for automation and investigation (PowerShell or equivalent) — an asset.
- Certifications (a plus): CompTIA Security+; SC-200, GCED or other certifications focused on detection, investigation, and defense; GCIH, GCIA, or any certification related to incident handling and threat response.
Benefits
- Inclusive and diverse work environment
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Threat Intelligence Analyst investigating telecom security threats and customer deployment data for Enea, a global telecom and cybersecurity software company. Supporting client security reviews and threat intelligence operations.
Information Security Analyst governing End - User Computing risks, controls, and remediation for TD, a major North American bank. Advising stakeholders and supporting governance reporting, audits, and regulatory requirements.
IT Security Analyst II coordinating cybersecurity monitoring, MSP oversight, audits, and incident follow - up. Supporting Veristat’s global life - sciences services and regulated technology environments.
Senior compliance analyst supporting Motorola Solutions’ mission - critical communications and analytics security programs. Managing audits, risk assessments, regulatory compliance, and information security governance.
Security Analyst protecting GitLab’s DevSecOps platform through vulnerability triage and CVE operations. Coordinating researchers, customers, and internal teams on secure software response.
SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.
Security analyst strengthening Desjardins's security posture through risk analysis, governance, and security controls. Supporting clients, partners, and cross - functional stakeholders.
Security Analyst II protecting Intact’s insurance operations through incident response and SIEM monitoring. Supporting security platforms, incident resolution, dashboards, and IT security initiatives.