Job Description
Cyber Security AnalystAmica Support OfficeFull-TimeThe OpportunityAmica is seeking a highly skilled and proactive
Senior Cybersecurity Analyst to join our growing Cybersecurity team. This role is responsible for protecting the organization's digital assets through advanced threat detection, incident response, vulnerability management, and security operations.
The ideal candidate is an experienced cybersecurity professional with a strong technical background, excellent analytical capabilities, and a passion for improving organizational security posture. You will play a key role in strengthening cyber resilience, supporting compliance initiatives, and advancing strategic security programs across the enterprise.
Key ResponsibilitiesSecurity Operations & Incident Response- Monitor, analyze, and respond to cybersecurity events and incidents across endpoints, networks, cloud platforms, and enterprise systems.
- Lead investigations into security incidents including malware, phishing, insider threats, ransomware, and unauthorized access attempts.
- Conduct root cause analysis and coordinate remediation efforts with internal IT teams and external partners.
- Develop and improve incident response procedures, playbooks, and escalation processes.
- Participate in on-call or after-hours response activities as required.
Threat Intelligence & Risk Analysis- Analyze emerging threats, vulnerabilities, and attack techniques to proactively identify organizational risk.
- Leverage threat intelligence sources and security telemetry to strengthen detection and response capabilities.
- Provide actionable recommendations to reduce risk exposure and improve defensive controls.
- Support cyber threat hunting and continuous monitoring initiatives.
Vulnerability Management & Security Hardening- Perform vulnerability assessments and support activities across infrastructure, cloud environments, and applications.
- Partner with infrastructure and application teams to prioritize remediation activities based on business impact and risk.
- Develop and maintain secure configuration baselines aligned to industry frameworks such as CIS, NIST, and ISO 27001.
- Track remediation progress and provide reporting on vulnerability management metrics and trends.
Security Engineering & Automation- Administer and optimize security technologies including SIEM, EDR/XDR, IDS/IPS, email security, and vulnerability management platforms.
- Enhance security operations through automation, orchestration, and scripting.
- Assist in the evaluation and implementation of new cybersecurity tools and technologies.
- Contribute to continuous improvement of security monitoring, alerting, and response capabilities.
Governance, Compliance & Awareness- Support compliance initiatives related to privacy, security, and regulatory frameworks including PCI DSS, ISO 27001, NIST, and applicable healthcare/privacy standards.
- Assist with audits, risk assessments, and documentation of security controls and procedures.
- Promote cybersecurity awareness by providing guidance, training, and best practices to employees and stakeholders.
- Contribute to the development and maintenance of cybersecurity policies, standards, and procedures.
Leadership & Collaboration- Serve as a cybersecurity subject matter expert for cross-functional teams and business stakeholders.
- Mentor junior team members and support knowledge-sharing initiatives.
- Contribute to the organization's long-term cybersecurity strategy and roadmap.
- Collaborate effectively with infrastructure, cloud, networking, privacy, and business teams to support enterprise security objectives.
QualificationsEducation & Certifications- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related discipline.
- Industry certifications such as CISSP, CISM, GIAC, CEH, SC-200, AZ-500, or equivalent are strongly preferred.
Experience- 5+ years of hands-on experience in cybersecurity operations, incident response, threat management, or related security disciplines.
- Experience working in enterprise or highly regulated environments is considered an asset.
- Experience supporting cloud and hybrid environments preferred.
Technical Skills- Strong knowledge of:
- SIEM and security monitoring platforms
- Endpoint Detection & Response (EDR/XDR)
- Vulnerability management solutions
- Firewalls, networking, and identity/access management
- Security protocols, authentication, and encryption technologies
- Familiarity with Microsoft security technologies including:
- Microsoft Defender XDR
- Microsoft Sentinel
- Microsoft Intune
- Entra ID
- Experience with cloud security in Azure, AWS, or GCP environments.
- Scripting or automation experience using PowerShell, Python, or similar languages is an asset.
Soft Skills- Strong analytical, troubleshooting, and problem-solving abilities.
- Excellent verbal and written communication skills.
- Ability to explain technical concepts to non-technical audiences.
- Strong organizational skills with the ability to manage multiple priorities in a fast-paced environment.
- Collaborative mindset with a commitment to continuous learning and improvement.
What You Can Expect From Us- A collaborative and inclusive workplace where diverse perspectives are valued
- Opportunities for professional growth, learning, and career development
- Meaningful work that contributes to the safety and well-being of seniors
- A supportive team environment focused on innovation and continuous improvement
- Centrally located office in Toronto's financial district with convenient PATH and TTC access
