Full-Time
Intermediate Operational Security Analyst
Solution SFT
IT and engineering consulting
No salary listed
Québec City, QC, Canada
Hybrid
Remote work with in-person attendance on 10 days' notice.
Bachelor's
Category
 IT & Security (1) |
|---|
Required Skills
Threat modeling
Cybersecurity
Penetration Testing
Requirements
- Possess a university first-cycle degree (baccalaureate) in computer science, information technology, or a related field recognized by the Quebec Ministry of Education, Higher Education or equivalent.
- Possess eight years of experience in information technology.
- Possess five years of relevant operational security experience accumulated during the last ten years.
- Have participated as an operational security analyst in at least two large-scale projects involving government information-security initiatives exceeding 1,000 person-days.
- Have completed, during the last three years, mandates totaling at least 150 person-days involving cybersecurity expertise.
- Possess two years of experience operating security infrastructures, particularly antivirus solutions and vulnerability scanners.
- Possess two years of experience with tools used to perform penetration tests.
- Possess at least three years of experience in operational security analysis in a web environment.
- Possess at least four years of experience in network analysis, security information and event management operation, scripting, and cloud security in a client-server environment.
- Have completed mandates totaling two years as an operational security analyst.
- Possess practical knowledge of threats, frameworks, and indicators of compromise.
Responsibilities
- Act as an information-security advisor to management.
- Analyze and correct deficiencies and major technical problems related to the operation of information-security infrastructures.
- Analyze cyberattacks perpetrated against the Ministry, collaborate on countermeasures, and propose solutions.
- Analyze centralized security logs to detect potential issues requiring action.
- Develop and maintain an expertise succession capability to ensure continuity of the Ministry's information-security services.
- Define activities to resolve security-environment problems, stabilize the environment, and help preserve confidence in information protection.
- Define and implement work processes based on ITIL best practices.
- Operate and manage security infrastructures, particularly the McAfee ePolicy Orchestrator antivirus solution, as well as intrusion-detection systems and vulnerability scanners.
- Track security alerts and incidents in the request-tracking system used by the Ministry.
- Identify the impacts and risks of unresolved information-security issues.
- Identify weaknesses, assess potential solutions, and provide necessary recommendations.
- Implement and maintain information-security incident-management processes.
- Keep all security procedures up to date.
- Produce status reports on the Ministry's information-security services.
- Produce statistical reports, analyze them, and provide management with opinions and recommendations.
- Produce or collaborate on information-security risk analyses.
- Propose information-security improvement targets and produce an action plan.
- Conduct studies and analyses related to implementing information-security technologies and apply the results to the Ministry's technology infrastructures.
- Conduct threat modeling and define the attack surface of the main systems under the directorate's responsibility.
- Perform application penetration tests using appropriate tools.
- Monitor and reference publications from vulnerability-monitoring organizations such as CERT/AQ.
- Ensure continuous availability of security services using monitoring tools.
- Produce risk analyses, opinions and recommendations, incident-resolution documentation, updated documentation, reports, security investigations, status reports, studies, and processes.
Solution SFT is a Canadian consulting firm focused on information technology and engineering. The company provides professional services, technical consulting, project delivery, systems expertise, and specialist talent for client initiatives. It serves public and private organizations, technology leaders, engineering teams, and project managers. Its operating model centers on consultants assigned to client programs and supported by recruiting, account management, delivery oversight, and corporate operations. Teams work across software, infrastructure, engineering, project management, analysis, recruiting, and client service. Teams support coordinated daily delivery.
Company Size
N/A
Company Stage
N/A
Total Funding
N/A
Headquarters
N/A
Founded
N/A