Security Operations Analyst
Cority
Software Engineering, IT, Operations
Canada
Primary Responsibilities:
- Monitor, assess, and maintain security controls within cloud environments
- Responsible for oversight of the vulnerability management program, including penetration testing, participating in reviews of vulnerability and security log reports, creation of mitigation actions and remediation plans, and tracking/monitoring to completion
- Manage the overall Security Awareness program for Cority, including annual training, quarterly phishing campaigns
- Participate in vendor management process, and customer audit process
- Liaise with CloudOps team to manage cloud security using security best practices and frameworks
- Participate in the design and implementation of security for all cloud environments
- Monitor, assess, and maintain security controls within cloud environments to safeguard data systems
- Leverage security tools within the cloud to proactively identify security threats, analyse root causes of security violations, and recommend corrective actions
- Integrate cloud security technologies with existing toolsets such as SIEM, EDR, and IAM solutions
- Serve as a cloud-security subject matter expert to support CloudOps, Enterprise IT, and risk analysis programs by performing, analysing, and documenting
- Ensure that all cloud tool sets and their integrations are properly maintained to meet stated policies, audit requirements and industry best practices
- Identify and maintain KPIs and other metrics that show the effectiveness of the program
- Provide Security Incident Response support and participate in the development of business cases and presentations on cloud security technologies
- Apply knowledge of the above skill areas to assist with the GRC program
Qualifications and Characteristics of an Ideal Candidate:
Minimum 5+ years of Information Security experience
3+ years of implementing cloud security for cloud infrastructures such as Azure and AWS.
3+ years of experience managing security within the Amazon Web Services (AWS) environment
Current knowledge and thorough understanding of Information Security issues, threats and trends
Demonstrated knowledge in the areas of risk assessment, strong understandings of secure communications, secure data storage, secure systems development, secure systems deployment and documentation
-
Demonstrated understanding of the real-world application of security and risk frameworks including ISO/IEC 27001, SOC 2 Type 2, NIST and FedRAMP (ISO42001 is an asset)
Assets:
• CISSP, CCSP, CISA, or other relevant industry related certifications
• Experience with ELK, AI, FedRAMP, GitLab
