Senior Cybersecurity Analyst

Solution SFT is seeking a Senior Cybersecurity Analyst for a client project in the public sector in Quebec City.

Work Mode: Remote work (in-person on 10 days' notice)

Activities to Perform

• Non-exhaustive and non-limiting, the main activities to be performed are divided into infrastructure security, information and identity protection:
• Secure infrastructure: Monitor systems to detect anomalies and potential threats
• Detect security issues
• Ensure continuous access to systems
• Detect anomalies in real-time
• Investigate security vulnerabilities and cybersecurity incidents
• Perform regular penetration testing
• Identify and correct vulnerabilities before they are exploited by cybercriminals
• Identify, isolate threats before they cause damage
• Prepare solutions of varying complexity according to information governance and security specifications
• Develop rapid response protocols
• Design and implement solutions for protecting computer infrastructure
• Ensure information and identity protection: Implement security strategies to prevent data breaches
• Update the computer security policy
• Diagnose and resolve problems of varying complexity
• Deliverables
• The main deliverables are:
• Risk analysis
• Incident reports, analysis reports (Forensic, Malware)
• Advice and recommendations
• C2 ticket - Incident resolution documentation
• Up-to-date documentation
• Security investigation
• Situation report
• Processes
• Firewall policies, SIEM rules, and secure configurations
• Basic Requirements:
• Hold a bachelor's degree in computer science, information technology, or a related field recognized by the Ministry of Education or equivalent
• Have twelve (12) years of experience in information technology
• Have eight (8) years of relevant operational cybersecurity experience, accumulated over the past ten (10) years
• Specific Requirements:
• Have at least four (4) years of experience in penetration testing, securing, and security (offensive/defensive, Network/Cloud)
• Have three (3) years of relevant experience in cybersecurity risk analysis (compliance advice), incident analysis (SOC/DFIR)
• Have one (1) year of practical knowledge in security strategy development
• Have one (1) year of experience in malware analysis in a client/server environment