Senior Cybersecurity Analyst

About Dialogue

Dialogue is Canada's leading provider of virtual care. By enhancing our Integrated Health Platform, we offer exceptional online health and wellness programs (primary care, mental health, TCCi, PAE, and wellness) to organizations looking to improve the well-being of their employees and families.

When it comes to our work, we set the bar very high. Together, we transform health and help millions of people improve their well-being. We firmly believe that an exceptional team demands more for its:

• Success
• Community
• Growth
• Performance

Do you feel like you can make a difference? Great news, we have a spot for you!

*We accept you as you are. As an equal opportunity employer, Dialogue is committed to creating a diverse and inclusive workplace for everyone. Qualified candidates will be considered without regard to citizenship, ethnic origin, race, color, religion, sex, sexual identity or expression, sexual orientation, disability, age, or veteran status. Individuals who require special accommodations are invited to write to us at* *accessibility@dialogue.co*

Your Role as a Senior Cybersecurity Analyst

The Senior Cybersecurity Analyst is a technical operational member of the cybersecurity team, responsible for leveraging and enhancing Dialogue's fundamental security capabilities. You will report to the Cybersecurity Team Lead and work closely with other security team members, as well as with IT, DevOps, Engineering, Legal, Compliance, and business stakeholders.

Your work will focus on the daily systems and processes that enable Dialogue to identify, understand, and respond to security risks. This includes security monitoring and logging, vulnerability management, security tool administration, application security support, incident investigations, operational reporting, and the development of practical security processes and operational guides.

This role is for someone who takes ownership of security technical work and sees it through. You will investigate alerts and findings, enhance detections and tools, automate repetitive workflows, and help teams understand what needs to be fixed and why. You will need to be able to work autonomously while collaborating with others when the work touches multiple systems, teams, or areas of expertise.

It is not necessary for all processes to be fully defined before you start. You are comfortable in an evolving security environment, capable of identifying gaps, bringing structure to incomplete workflows, and contributing to the development of more consistent and mature security practices over time. You know when to make a pragmatic technical decision and when to escalate architectural, commercial, or strategic concerns to higher risk.

Your Responsibilities

• Manage and improve security monitoring: Administer and optimize our SIEM and logging environment, integrate new data sources, and ensure the visibility needed to detect and investigate threats.
• Enhance detection and response: Triage alerts, investigate suspicious activities, refine detections, and reduce false positives. Develop and maintain clear operational guides to ensure a consistent and effective response.
• Support incident investigations: Participate in investigations, evidence collection, and analysis, helping the team respond effectively during incidents.
• Drive significant security improvements: Identify recurring issues related to incidents and vulnerabilities, and collaborate with teams to address root causes and strengthen controls.
• Provide application security advice: Collaborate with developers to review findings, prioritize risks, and provide practical and actionable remediation recommendations.
• Contribute to security reviews: Participate in application and project reviews, helping teams identify risks and make informed security decisions.
• Operate and improve security tools: Ensure the daily administration, integrations, and enhancements of security platforms, including automation when it adds value.
• Collaborate with teams: Work closely with IT, DevOps, Engineering teams, and stakeholders to investigate issues, communicate risks, and complete work.
• Contribute to security practice maturity: Participate in the development of evolving processes, documentation, and standards as the security program grows.

We would love to meet you if you have

• 3+ years of professional experience in cybersecurity or a related technical role, with practical experience in security monitoring, vulnerability management, incident response, security tools, or cloud security.
• Experience with technologies and workflows that support modern security operations, including cloud platforms such as AWS, Git, CI/CD, and infrastructure-as-code tools like Terraform.
• Experience with application security testing tools or secure development practices, and comfortable helping teams understand and address security findings.
• Use of Python, PowerShell, Bash, or another scripting language to automate operational tasks and improve security workflows.
• Integration of security tools or platforms using APIs, scripts, or workflow automation.
• Experience in endpoint security, identity management, privileged access management, or cloud security platforms.
• Participation in security incident investigations through alert analysis, technical troubleshooting, evidence collection, or coordination with other teams.
• Creation, tuning, or maintenance of SIEM detections, detection-as-code, or versioned detection logic.
• At Dialogue, your well-being is our priority.

Taking care of others is also taking care of our team! Depending on your role and employment status, you may have access to the following benefits:

• Access to the Dialogue app and virtual mental health support for you and your family
• Fully covered insurance, health spending account, dental coverage, and wellness reimbursement
• 4 weeks of vacation, 9 wellness days, and 1 day of volunteering
• Hybrid work: 3 days/week in our Montreal office (except for fully remote positions)
• Possibility to work abroad up to 4 weeks per year
• Incentive programs, referral bonuses, and REER equivalent contribution
• Learning through Coursera, external training budget, and mentorship program
• Optional parental leave