Intermediate Cybersecurity Analyst to support Microsoft-based security operations, incident

Our client has an immediate need for an Intermediate Cybersecurity Analyst to support Microsoft-based security operations, incident response, third-party risk assessments, and vulnerability management across hybrid on-premises and Azure environments.

This is a temporary backfill assignment with potential for extension.

Location: Calgary, AB (1 day per week in office) or Remote outside Calgary

Duration: Until January 8, , with potential for extension

Hours: Monday-Friday, 8:00 a.m. - 4:30 p.m. MST

Must Have:

• 3+ years of cybersecurity experience in security operations, incident investigation, and monitoring.
• Hands-on experience using Microsoft Sentinel and Microsoft Defender tools for security monitoring, alert triage, and incident investigation.
• Experience with third-party/vendor risk assessments and vulnerability management.
• Familiarity with hybrid environments, including on-premises infrastructure and Microsoft Azure.
• Strong investigative, analytical, documentation, and communication skills.
• Ability to work independently and prioritize security risks effectively.

Nice-to-Have:

• Experience with Microsoft Defender for Endpoint, Defender for Identity, Defender for Office , and Defender for Cloud Apps.
• Familiarity with Tanium.
• Knowledge of NIST and CIS security frameworks.

Responsibilities:

• Security Operations (50%): Monitor and investigate security alerts, document findings, assess incidents, and escalate as required using Microsoft security tools.
• Third-Party Risk (30%): Conduct vendor security assessments, identify control gaps, document risks, and recommend mitigation strategies.
• Vulnerability Management (20%): Assess and prioritize vulnerabilities, track remediation, and support risk reduction.
• Provide basic security guidance and collaborate with IT and security teams.