Cybersecurity Analyst who lives, eats, and breathes security. Reporting directly to the IT Engineer and collaborating closely with our software engineering teams, you'll be someone ready to dive in, take ownership of our network and application security, and help safeguard our digital infrastructure as we scale.
This role is ideal for someone who is
resourceful, enjoys solving complex security challenges, stays calm under pressure, adapts to new threats quickly, and thinks like attackers to better analyze and protect our systems. You'll be hands-on in all aspects of our network security processes, take responsibility for the security of our network applications, develop essential security policies, and independently manage our infrastructure. As a valued member of the security team, you'll help protect and scale our environment as we grow. Knowledge of SOC 2 frameworks and RMM systems is essential.
About the RoleDay to Day!- IT & Sprint Integration: Participate in IT sprint planning to ensure security tasks, enhancements, and remediation efforts are continuously integrated into team workflows.
- Compliance & Frameworks: Maintain and align our posture with industry security standards and frameworks (SOC2, ISO 27001, NIST, CIS Controls).
- 👥 Cross-Team Collaboration: Work closely with software developers to provide clear, actionable solutions (with pros and cons) for identified security weaknesses.
- Infrastructure & Cloud Care: Manage and improve cloud hosting infrastructure in Azure as well as on-premises environments.
- 🔄 Multi-Hat Flexibility: Adapt and step into various IT and security responsibilities as needed to help protect and grow the organization.
Risk Assessment & Monitoring- Perform regular vulnerability assessments and deep dives across systems and applications.
- 🚨 Monitor, respond to, and triage security incidents in real time.
- Set up automated auditing, alerts, and notifications across our entire infrastructure using KQL or other log query languages.
Security Engineering & Automation- 🔒 Develop and implement a modern Zero Trust security model across our networks.
- Automate end-device deployments and security patch management using RMM software and custom scripts to stay ahead of new CVEs.
- Commit to ongoing learning to keep pace with evolving technological capabilities and emerging cybersecurity threat vectors.
RequirementsWhat You BringRequired:
- Minimum of 3 years of practical experience in network security, focusing on application security.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security and Assurance, Network Engineering, Computer Engineering, or Software Engineering
- Proficiency in Microsoft Office 365 Admin Center and all Azure cloud services.
- In-depth knowledge and hands-on experience in Office 365, Azure infrastructure, Microsoft Intune, and Entra Domain Services (formerly AAD) (Entra ID)
- In-depth understanding and hands-on experience of on-premises and cloud security, including Microsoft tools and frameworks such as Sentinel and Microsoft Defender.
- Experience automating end device deployment and managing security patches.
- Knowledge of NIST, ISO 27001, CIS Controls, SOC2 and regulatory requirements.
- Experience with:
- Python, Bash and PowerShell scripting.
- C#, React and secure coding practices.
- Linux operating systems and security software.
- Kubernetes. - Proficiency in DevOps tools and practices, including CI/CD pipelines and containerization.
Key Skills- Strong Critical Thinker & Risk Assessor: Exceptional analytical and problem-solving abilities to evaluate risks, weigh trade-offs, and design practical mitigation strategies.
- Effective Communicator: Ability to translate complex security risks into clear, understandable language for non-technical teams and leadership.
- Self-Motivated & Autonomous: Capable of prioritizing tasks independently, taking full ownership of projects, and driving security initiatives without micro-management.
- Team Player & Collaborative: Works constructively across departments, bridging the gap between security needs and practical software development goals.
- Adaptable & Fast-Learning: Eager to continuously master new tools, keep up with new threats, and thrive in a fast-paced environment.
BenefitsSalary, Term & Working Location - $75,000 - $100,000 CAD yearly (commensurate with experience)
- Workplace: In-office position in our Burnaby, BC office; with with Hybrid Flex Options (1 day WFH) available after 3 months
- Extended comprehensive health, dental, vision, travel and life insurance coverage for you and your family
- Three weeks paid vacation
