Postuler

Publié avant-hier

Senior Cybersecurity Analyst

@ Encore Technical Solutions Inc.

Toronto, Ontario

Temps plein5+ ans d’expérience
Postuler
SIGNAUX

Responsabilités :

  • Triage and investigate security alerts across endpoint, network, identity and cloud environments
  • Lead investigations into phishing, malware, ransomware, account compromise and insider-risk events
  • Find root causes and coordinate fixes with internal teams and third-party providers
  • Build and refine IR playbooks, runbooks and escalation paths
  • Take part in a shared on-call rotation

Résumé des exigences :

  • Mentor junior analysts and share knowledge across the team
  • 5+ years of hands-on experience in security operations, incident response or threat management
  • A degree in Computer Science, IT, Information Security or a related field (or equivalent experience)
  • Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryption
  • Experience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra ID
  • Cloud security experience in Azure, AWS or GCP; hybrid environments are a plus

Outils et compétences

Source et dates

Type de source non vérifié · apify-linkedin

Date publiée par l’employeur
2026-11-11
Première détection par notre source
2026-11-14
Mise à jour du dossier source
2026-11-14

Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.

Encore Technical Solutions Inc.

ChampValeur
Offres sur Jobsy4
Description

Senior Cybersecurity Analyst

Toronto, ON | Permanent, Full-Time

The Role

Reporting to the Director of Cybersecurity, you’ll be a senior hands-on member of the security team. You’ll own detection and response, drive vulnerability remediation, and help set the direction of the security program. You’ll also be the go-to security expert for IT and business partners across the organization.

What You’ll Do

Detection & Incident Response

  • Triage and investigate security alerts across endpoint, network, identity and cloud environments
  • Lead investigations into phishing, malware, ransomware, account compromise and insider-risk events
  • Find root causes and coordinate fixes with internal teams and third-party providers
  • Build and refine IR playbooks, runbooks and escalation paths
  • Take part in a shared on-call rotation

Threat Hunting & Risk

  • Track the threat landscape and turn intelligence into improved detections
  • Run proactive threat hunts using available telemetry
  • Recommend practical, risk-based improvements to security controls

Vulnerability Management & Hardening

  • Run vulnerability scanning and assessments across on-prem, cloud and application environments
  • Work with infrastructure and application owners to prioritize fixes by risk
  • Maintain hardening baselines aligned to CIS, NIST and ISO 27001
  • Report on remediation progress, trends and key metrics

Security Tooling & Automation

  • Manage and tune the security stack: SIEM, EDR/XDR, IDS/IPS, email security and scanning tools
  • Automate repetitive work through scripting and SOAR-style workflows
  • Evaluate and help roll out new security technologies

Governance & Awareness

  • Support compliance work across PCI DSS, ISO 27001, NIST and Canadian privacy requirements
  • Contribute to audits, risk assessments, control documentation and policy updates
  • Help raise security awareness through training and practical guidance for staff

Leadership

  • Mentor junior analysts and share knowledge across the team
  • Contribute to the long-term cybersecurity roadmap
  • Partner with infrastructure, cloud, networking, privacy and business teams

What You Bring

  • 5+ years of hands-on experience in security operations, incident response or threat management
  • A degree in Computer Science, IT, Information Security or a related field (or equivalent experience)
  • Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryption
  • Experience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra ID
  • Cloud security experience in Azure, AWS or GCP; hybrid environments are a plus
  • Scripting skills in PowerShell, Python or similar are an asset
  • Experience in a regulated or enterprise environment is an asset
  • Certifications such as CISSP, CISM, GIAC, SC-200, AZ-500 or CEH are strongly preferred
  • Clear communication, including the ability to explain technical risk to non-technical audiences
  • Strong organization and judgment when juggling competing priorities

Emplois semblables

  • Cybersecurity Analyst / Analyste en cybersécurité

    Montréal, QC
    Temps plein

    FENCECORE

    2+ ansCandidates need 2 to 4 years of hands-on SOC, MSSP or MSP security experience, comfort with EDR/XDR consoles and Microsoft 365 security, and an understanding of AI security risks. Scripting skills, strong written communication and French and English bilingualism are an asset.

    Sophos, Microsoft 365, Entra ID, Microsoft Defender for Office 365, Microsoft Purview, Duo

  • Cybersecurity Analyst, Identity & Access Management

    Calgary, AB

    Gibson Energy: Gibson Energy is a North American-based liquids infrastructure company headquartered in Calgary, Alberta.

    5+ ansGibson Energy needs candidates with at least 5 years of cybersecurity experience, 3 of them on Azure and Entra ID. They must know Conditional Access, identity lifecycle management, MFA, SSO and standard authentication protocols.

    Microsoft Entra ID, Active Directory, Azure, Privileged Access Management, Entra ID PIM

  • Cybersecurity Analyst, Mining/Mineral Processing

    Toronto, ON

    Blue Moon Metals

    2+ ansBlue Moon Metals needs candidates with 2-5 years of security or IT security operations experience, ideally in industrial or OT settings. Candidates should know NIST CSF 2.0 or IEC 62443, common security tools, and IT/OT network segmentation.

    SIEM, EDR, XDR, vulnerability scanners, firewall monitoring platforms, SCADA

  • Level 3 Cybersecurity Analyst (SOC)

    Montréal, QC
    HybrideTemps plein

    WEPOINT Canada Innovation

    3+ ansCandidates need 3 to 5 years of experience or knowledge with SIEM, ELK, IDS/IPS, firewalls, DLP and endpoint detection (EDR), plus incident response, log and PCAP analysis, and networking fundamentals. Candidates also need Windows or Linux forensics knowledge, basic scripting, and excellent French and English communication.

    SIEM, ELK, IDS/IPS, pare-feu, EDR, DLP

    Level 3 Cybersecurity Analyst (SOC)

    Montréal, QC
    HybrideTemps plein

    WEPOINT Canada Innovation

    3+ ansCandidates need 3 to 5 years of experience or knowledge with SIEM, ELK, IDS/IPS, firewalls, DLP and endpoint detection (EDR), plus incident response, log and PCAP analysis, and networking fundamentals. Candidates also need Windows or Linux forensics knowledge, basic scripting, and excellent French and English communication.

    SIEM, ELK, IDS/IPS, pare-feu, EDR, DLP

    Level 3 Cybersecurity Analyst (SOC)

    Montréal, QC
    HybrideTemps plein

    WEPOINT Canada Innovation

    3+ ansCandidates need 3 to 5 years of experience or knowledge with SIEM, ELK, IDS/IPS, firewalls, DLP and endpoint detection (EDR), plus incident response, log and PCAP analysis, and networking fundamentals. Candidates also need Windows or Linux forensics knowledge, basic scripting, and excellent French and English communication.

    SIEM, ELK, IDS/IPS, pare-feu, EDR, DLP

  • Cybersecurity Analyst

    Calgary, AB
    Contrat

    Astra North Infoteck Inc.

    Candidates need experience in cybersecurity operations, incident response, vulnerability assessment and risk analysis. They also need knowledge of identity and access management, plus strong communication and stakeholder skills for business analysis work.

    Cybersecurity, Identity and access management, Strategic planning, Prioritization, Business analysis, Business processes

  • Cybersecurity Analyst

    Toronto, ON
    80k–100k $/anTemps plein

    Creyos

    1+ ansCandidates need 1 to 3 years of professional information security experience, working knowledge of JIRA and Confluence, and an understanding of security frameworks such as NIST or SOC 2. Strong communication skills and a hands-on, accountable approach to on-site security are essential.

    JIRA, Confluence

Lieux et modes de travail

Lieux

Tout le CanadaTélétravail · Hybride · Sur place · Sur le terrain

Astuce : ajoutez le télétravail pour élargir la recherche.

Exclure des lieux

Mode de travail

Offres de cette entreprise dans les résultats

Voici les offres de cette entreprise chargées dans votre recherche. Elle peut avoir d’autres postes ouverts.