Cybersecurity analyst monitoring threats and strengthening controls for Innergex’s renewable energy operations. Investigating incidents, assessing vulnerabilities, and advising technology teams.
Responsibilities
Monitor, analyze, and investigate security events and alerts to identify potential threats and ensure an appropriate response.
Participate in the investigation and management of security incidents, including root cause analysis, documentation, and the implementation of corrective measures.
Conduct vulnerability assessments and follow up on remediation plans.
Conduct risk analyses related to infrastructure, systems, applications, and cloud-based solutions.
Collaborate with IT and project teams to integrate cybersecurity requirements into technology initiatives.
Help improve the security posture of the company’s environments.
Develop and optimize detection rules, use cases, and monitoring mechanisms for security tools.
Monitor emerging threats and recommend appropriate preventive measures.
Participate in audits, compliance assessments, and security control reviews.
Produce metrics, dashboards, and reports on risks and the performance of security controls.
Contribute to the development and improvement of information security policies, standards, and procedures.
Serve as an advisor to business and technology teams on issues related to cybersecurity risks and controls.
Report to the Vice President IT/OT.
Requirements
Bilingualism (French and English, both spoken and written) is required to collaborate with various stakeholders outside Quebec on a recurring basis.
Bachelor’s degree in computer science, information security, or a related field, or an equivalent combination of education and experience.
3 to 5 years of relevant experience in information technology, including significant experience in cybersecurity.
Solid understanding of defensive cybersecurity practices, including monitoring, detection, incident response, and vulnerability management.
Experience in handling complex incidents and improving security controls.
Good knowledge of Windows and Linux environments.
Knowledge of Azure or AWS cloud environments.
Experience with tools such as Microsoft Sentinel, INSM, or Nozomi is a plus.
Knowledge of frameworks such as NIST, NERC-CIP, ISO 27001, or CIS Controls is a plus.
Cybersecurity certification (CISSP, Security+, GIAC, or equivalent) is considered an asset.
Excellent analytical, problem-solving, and priority-setting skills.
The position is based at the company’s headquarters in Longueuil, just a few steps away from the Longueuil-Université de Sherbrooke metro station.
This position is at the P2 level.
Benefits
Competitive salary and annual bonus
Three weeks vacation to start and paid vacations during the holiday season
100% Innergex-funded medical insurance from day one of employment, including primary care services through dialogue (or telemedicine) for permanent positions
Group retirement plans with employer participation
Azure AD Security Analyst leading identity and access management solutions at Intact insurance. Integrating Azure AD, automating operations, and supporting major incidents.
Information Security Analyst protecting cloud, identity, and infrastructure platforms for Alimentiv, a gastrointestinal clinical research organization. Strengthening cybersecurity controls, monitoring threats, and supporting compliance.
Senior Cyber Security Analyst protecting Penn Entertainment’s online gaming, sports betting, and media platforms. Leading incident response, threat detection, automation, and vulnerability remediation.
Senior Systems & Security Analyst owning Azure, enterprise network architecture, and security for Canadian specialty insurer Optiom. Leading infrastructure projects, incident response, and production change coordination.
SAP Security Analyst securing Government of Alberta ERP systems. Translating business needs into access controls, risk assessments, and enterprise security solutions.
Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.