S

Solution SFT

Advises companies on IT, engineering and custom software

Intermediate Operational Security Analyst

Full-TimeUpdated on 10/17/2026
No salary listed
Senior, Expert
Bachelor's
Québec City, QC, Canada
HybridRemote work, with on-site attendance on 10 days' notice.
CybersecuritySecurity Operations & Incident Response

About the job

Requirements
  • Possess a bachelor's-level university degree in computer science, information technology, or a related field recognized by the Ministry of Education, Higher Education and Research, or equivalent.
  • Have eight years of experience in information technology.
  • Have five years of relevant operational security experience accumulated within the past ten years.
  • Have participated as an operational security analyst in at least two large-scale projects for government information-security initiatives, each exceeding 1,000 person-days.
  • Within the past three years, have completed mandates totaling at least 150 person-days involving cybersecurity expertise.
  • Have two years of experience operating security infrastructure, particularly antivirus solutions and vulnerability scanners.
  • Have two years of experience using tools for penetration testing.
  • Have at least three years of operational security analysis experience in a web environment.
  • Have at least four years of experience in network analysis, SIEM operation, script programming, and cloud security in a client-server environment.
  • Have completed mandates totaling two years as an operational security analyst.
  • Have practical knowledge of threats, frameworks, and indicators of compromise (IOC).
Responsibilities
  • Advise management on information security.
  • Analyze and correct deficiencies and major technical issues affecting the operation of IT security infrastructure.
  • Analyze cyberattacks against the Ministry, collaborate on responses, and propose solutions to counter them.
  • Analyze centralized security logs to detect potential issues requiring action.
  • Develop and maintain a pipeline of expertise to ensure continuity of the Ministry's IT security services.
  • Define activities to resolve issues in the security environment, maintain stability, and help preserve confidence in information protection.
  • Define and implement workflows based on ITIL best practices.
  • Operate and manage security infrastructure, particularly McAfee ePolicy Orchestrator (ePO), intrusion detection systems (IDS), vulnerability scanners, and related tools.
  • Track security alerts and incidents in the Ministry's request-tracking system.
  • Identify impacts and risks associated with unresolved IT security issues.
  • Identify weaknesses, assess potential solutions, and provide recommendations.
  • Implement and maintain IT security incident-management processes.
  • Keep security procedures up to date.
  • Produce status reports on the Ministry's IT security services.
  • Produce and analyze statistical reports and provide management with opinions and recommendations.
  • Produce or contribute to information-security risk analyses.
  • Propose IT security improvement targets and produce an action plan.
  • Conduct studies and analyses related to implementing IT security technologies and apply the results to the Ministry's technology infrastructure.
  • Develop threat models and define the attack surface of key systems under management's responsibility.
  • Conduct application penetration tests using appropriate tools.
  • Monitor and consult vulnerability publications from organizations such as CERT/AQ.
  • Maintain continuous availability of security services using monitoring tools.
  • Deliver risk analyses, opinions and recommendations, incident-resolution documentation, up-to-date documentation, reports, security investigations, status reports, studies, and processes.

About the company

S

Solution SFT

View
Website

Solution SFT advises organizations on IT strategy and engineering, and builds custom software for startups, small businesses and larger companies. Its consultants review how clients manage technology, check infrastructure and compliance, and recommend changes to business processes. The firm's security and infrastructure work covers data protection, cloud migration and recovery planning for systems that need to keep operating through disruptions. Developers create web and mobile applications, connect software through interfaces and modernize older systems, including tools that reduce manual coding. Solution SFT was founded in 2020 and is headquartered in Montreal, Quebec.

Company Size

51-200

Company Stage

N/A

Total Funding

N/A

Headquarters

Montreal, Canada

Founded

2020

Get referred to Solution SFT

See people who can refer or advise you