Tier 2 Cybersecurity Analyst

For more than 40 years, Calian has been solving the world’s most complex problems by pairing the brightest minds with powerful technology. Calian solutions impact the world; from the satellites in space that connect us to the farms that feed us, from the medical professionals who care for us to the governments, schools and companies that make the world better every day.

Position Overview

Reporting to the Senior Director, Information Systems Operations and Cybersecurity, the T2 Cybersecurity Analyst will participate in information security operation activities, both on an organizational and technical level while maintaining Calian’s corporate cyber security program. This role will help to execute all aspects of the cyber operations program including security incident response, investigations, threat hunting, identifying abnormalities, and prevention. Additionally, the T2 Cybersecurity Analyst will provide support for a complex global network encompassing on-prem, hybrid cloud, and multi-cloud environments of Calian’s cyber security program as required interfacing with team members within the Cyber team and across Information Systems to best support our Calian users across the Business Units.

Responsibilities

The T2 Cyber Analyst is responsible for the support of Calian’s cyber program: 

• Review and respond to any incidents forwarded by Tier 1 analysts. Investigate security incidents and determine the root cause.
• Review incoming threat intelligence and respond accordingly.  Analyze logs, network traffic, and other data sources to identify the source of the incident.
• Implement automated processes for routine tasks to improve efficiency and accuracy. This could include automating vulnerability scans, threat detection, and incident response processes.
• Utilize Artificial Intelligence and Machine Learning techniques to enhance threat detection and prediction capabilities. This could involve training machine learning models on historical data to predict future threats or using AI to automate responses to common threats.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Provide detailed incident reports and recommendations for remediation. Document all actions taken in response to incidents to create a knowledge base for future reference.
• Stay updated with the latest developments in cybersecurity, infrastructure automation, and AI/ML. Participate in relevant training and professional development activities.
• Assist with annual security policy reviews.

Other tasks as assigned.

Qualifications

• A post secondary degree in IT Networking, Cybersecurity or a related program.
• 4 to 7 years of experience in Cybersecurity.
• Demonstrated cyber security domain expertise as evidenced with industry certifications, like CISSP, vendor certifications, or equivalent experience. 
• Excellent communication skills with the ability to develop strong working relationships. 
• Strong hands-on information security skills and experience 
• Experience responding to information security incidents. 
• Proven capability to consult on large enterprise information security matters. 
• Ability to act as a liaison between teams and business units. 
• Proven experience designing, implementing, and managing innovative solutions to complex security and infrastructure environments. 
• In depth understanding of operating systems, network/system architecture, protocols, enterprise services, and enterprise architecture design.
• Experience in Machine Learning and/or Application Programming Interface development.
• Experience with Endpoint and Extended Detection and Response systems
• Experience with Azure/AWS/GCP security architecture 
• Experience with vulnerability management systems
• Ability to conduct security testing and vulnerability scanning and interpret results.
• Experience with testing tools such as Burpsuite or Metasploit
• Understanding of security controls/mechanisms and threat/risk assessment techniques relating to complex data, application, and network environments.
• Familiarity with MITRE ATT&CK Framework and OWASP
• Proficiency in SIEM and EDR monitoring systems.
• Knowledge of security standards such as ISO 27001, SOC, or NIST
• Solid understanding of ITIL and SLA’s
• Proficiency in developing and the understanding of the importance of documentation.

Additional Requirements

• Excellent communication skills
• A clear sense of urgency to achieve results.  A “can-do”, “let’s make it happen” attitude and a focus on a positive customer experience
• Willingness to learn and share knowledge
• Ability to think proactively, critically, and independently to make good decisions
• Exceptional attention to detail and commitment to a high degree of accuracy. Must be able to gather, prioritize and analyze information skillfully
• Keen sense of time management and flexibility, with strong follow up abilities 
• Strong interpersonal skills, commitment to collaboration, and creative problem solving

Job Title: Cybersecurity Analyst Tier 2

Requisition Number: 1376

Date: ex: May2, 2024

Location 1: Ontario

Remote: Yes

Business Unit: Corporate

Department: Cyber Security

Job Type: Full-time

#LI-AS1#

#SF#