Cyber Security Analyst

Seeking a Cyber Security Analyst what will identify, assess, prioritize and communicate vulnerabilities and threats across the infrastructure and applications. The candidate will also be expected to develop new strategies, processes, best-practices, and tools that contribute to our cyber security process. The ideal candidate will have good general knowledge of security concepts, significant experience, and proven expertise in both application and infrastructure assessments.

What you will be doing

• Provide penetration testing assessments and application security consultations across various platforms

• Coordinate with business and engineering stakeholders to develop requirements and a plan to implement security service enhancements

• Develop automation strategies and provide advice on Know-Hows for CI/CD automation pipeline

• Coordinate and evaluate 3rd party vendors and internal engineering organization to develop integration solutions and automation requirements

• Coordinate with DevOps team members to ensure security projects and activities are completed on time and with minimal impact to the business

• Conduct research on emerging security technologies, products and services

• Be on-call off-hours to provide support for operational tasks

• Other duties as assigned

What you’ll bring to the company

• Experience in security systems, executing extensive pen tests with various tools, Kali, VPN and SSO technologies, Qualsys security scanner, Threat Management, IPS, IDS, code release automated security testing, tools for security alerts, Linux security hardening experience

• Experience with AWS services as Cloud Watch, AWS Inspector, AWS Guard Duty

• Hands-on experience with common security tools and products (e.g. IDS/IPS, NGFW, WAF, SIEM/Log management, auditing/vulnerability assessment, forensics) and relevant security certifications are strongly preferred

• Knowledge of current and emerging cloud and IaaS security trends. IaaS security and architecture concepts, including network segmentation, perimeter security, event monitoring; remediation methods to bring cloud infrastructures into compliance for security compliance; the risks that exist when measures are not taken to provide for contingency planning and business continuity

• Time management skills, ability to meet deadlines

• Ability to function in a fast-paced, flexible environment

• Ability to not only adapt to change, but often be a force for positive change

• Preferred experience with languages such as Java, C, C++, JavaScript, Python, Ruby, Perl, Bash, Powershell will be an asset

• Experience with HIPAA, PCI-DSS, or similar regulations preferred

• Post-Secondary Education in Computer Engineering or a related field

• CISSP, Linux, AWS, A+, Network+, MCP, MCSE, MCITP, or a similar certification preferred

• At least 3 years experience working with AWS and Security

Experience:

• Cyber Security: 2 years (Preferred)

National Consultants Professionals Ltd (NCP)is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by provincial, federal and local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. NCP makes hiring decisions based solely on qualifications, merit, and business needs at the time. NCP is committed to providing reasonable accommodations for qualified individuals with disabilities.