Job opportunity
Senior Cybersecurity Analyst
Encore Technical Solutions Inc.
Reporting to the Director of Cybersecurity, you’ll be a senior hands-on member of the security team. You’ll own detection and response, drive vulnerability remediation, and help set the direction of the security program. You’ll also be the go-to security expert for IT and business partners across the organization.
What You’ll Do
Detection & Incident Response
Triage and investigate security alerts across endpoint, network, identity and cloud environments
Lead investigations into phishing, malware, ransomware, account compromise and insider-risk events
Find root causes and coordinate fixes with internal teams and third-party providers
Build and refine IR playbooks, runbooks and escalation paths
Take part in a shared on-call rotation
Threat Hunting & Risk
Track the threat landscape and turn intelligence into improved detections
Run proactive threat hunts using available telemetry
Recommend practical, risk-based improvements to security controls
Vulnerability Management & Hardening
Run vulnerability scanning and assessments across on-prem, cloud and application environments
Work with infrastructure and application owners to prioritize fixes by risk
Maintain hardening baselines aligned to CIS, NIST and ISO 27001
Report on remediation progress, trends and key metrics
Security Tooling & Automation
Manage and tune the security stack: SIEM, EDR/XDR, IDS/IPS, email security and scanning tools
Automate repetitive work through scripting and SOAR-style workflows
Evaluate and help roll out new security technologies
Governance & Awareness
Support compliance work across PCI DSS, ISO 27001, NIST and Canadian privacy requirements
Contribute to audits, risk assessments, control documentation and policy updates
Help raise security awareness through training and practical guidance for staff
Leadership
Mentor junior analysts and share knowledge across the team
Contribute to the long-term cybersecurity roadmap
Partner with infrastructure, cloud, networking, privacy and business teams
What You Bring
5+ years of hands-on experience in security operations, incident response or threat management
A degree in Computer Science, IT, Information Security or a related field (or equivalent experience)
Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryption
Experience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra ID
Cloud security experience in Azure, AWS or GCP; hybrid environments are a plus
Scripting skills in PowerShell, Python or similar are an asset
Experience in a regulated or enterprise environment is an asset
Certifications such as CISSP, CISM, GIAC, SC-200, AZ-500 or CEH are strongly preferred
Clear communication, including the ability to explain technical risk to non-technical audiences
Strong organization and judgment when juggling competing priorities
#J-18808-Ljbffr
Apply on source site What You’ll Do
Detection & Incident Response
Triage and investigate security alerts across endpoint, network, identity and cloud environments
Lead investigations into phishing, malware, ransomware, account compromise and insider-risk events
Find root causes and coordinate fixes with internal teams and third-party providers
Build and refine IR playbooks, runbooks and escalation paths
Take part in a shared on-call rotation
Threat Hunting & Risk
Track the threat landscape and turn intelligence into improved detections
Run proactive threat hunts using available telemetry
Recommend practical, risk-based improvements to security controls
Vulnerability Management & Hardening
Run vulnerability scanning and assessments across on-prem, cloud and application environments
Work with infrastructure and application owners to prioritize fixes by risk
Maintain hardening baselines aligned to CIS, NIST and ISO 27001
Report on remediation progress, trends and key metrics
Security Tooling & Automation
Manage and tune the security stack: SIEM, EDR/XDR, IDS/IPS, email security and scanning tools
Automate repetitive work through scripting and SOAR-style workflows
Evaluate and help roll out new security technologies
Governance & Awareness
Support compliance work across PCI DSS, ISO 27001, NIST and Canadian privacy requirements
Contribute to audits, risk assessments, control documentation and policy updates
Help raise security awareness through training and practical guidance for staff
Leadership
Mentor junior analysts and share knowledge across the team
Contribute to the long-term cybersecurity roadmap
Partner with infrastructure, cloud, networking, privacy and business teams
What You Bring
5+ years of hands-on experience in security operations, incident response or threat management
A degree in Computer Science, IT, Information Security or a related field (or equivalent experience)
Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryption
Experience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra ID
Cloud security experience in Azure, AWS or GCP; hybrid environments are a plus
Scripting skills in PowerShell, Python or similar are an asset
Experience in a regulated or enterprise environment is an asset
Certifications such as CISSP, CISM, GIAC, SC-200, AZ-500 or CEH are strongly preferred
Clear communication, including the ability to explain technical risk to non-technical audiences
Strong organization and judgment when juggling competing priorities
#J-18808-Ljbffr