Analyst, Cyber Security

Req Id : 414446

Our team is advancing how Canadians connect with each other and the world, and developing breakthrough technology plays a vital role in making our purpose a reality.

Contribute your experiences, talents and perspectives as we develop innovative digital solutions and best-in-class networks together.

We know you'll feel a sense of meaningful connection and belonging within our team. Then, with our commitment to environmental, social and governance initiatives, you can feel good about your greater impact - helping people as they connect, work, learn and play.

Be at the forefront of shaping the best digital connections and next-generation technology in Canada. You'll join the largest, award-winning, high-tech team in our country, working with the brightest minds across many industries.

Bring your ideas and skills as we grow cutting-edge fibre and 5G networks, develop advanced products and services to run on these networks and then enable the delivery of content from our top media properties and services - ensuring that our customers can stay entertained and connected anytime, anywhere.

Summary

The Bell Security Operations Center team is responsible for providing round the clock security services by proactively monitoring, detecting security attacks and violations and providing effective mitigation strategies to Bell and its customer information assets.

Key Responsibilities

• Support Endpoint Detection and Response (EDR) agent policy configurations
• Focus and specialization on detection and response to EDR, malware, endpoint security attacks
• Troubleshoot EDR agent policies
• Perform activities related to Endpoint Security agent support, such as optimizing policy configuration in response to new and emerging threats
• Liaise with Corporate Security Cyber Incident Response Team and Forensic team to assist with incidents
• Participate and contribute to the design, development and implementation of security initiatives related to endpoint security / endpoint detection & response
• Support and assist with agent upgrades, including engaging vendor support for functionality issues and feature enhancement requests
• Provide reporting and assistance on agent health issues, such as malfunctioning or missing endpoint security agents.
• Correlate threat intelligence with active attacks and vulnerabilities within the enterprise

Critical Qualifications

• Experience in deploying, configuring and using enterprise EDR and endpoint security tools, such as SentinelOne EPP, Symantec Endpoint Protection (SEP) and Microsoft Defender.
• Knowledge of Scripting (Python, Powershell) and use of API's and their use in forensic and incident response analysis
• Experience with performing analysis of security events to determine root cause and provide resolution / mitigation options
• Competence in using internal and external ticketing systems for ITIL-based incident, problem and change management activities
• Previous experience in troubleshooting day-to-day operational processes such as report generation, data verification, data correlation, etc.
• Excellent oral, written and documentation skills
• Methodical and creative approach to problem-solving
• Experience with translating complex and ambiguous problems into actionable solutions

Adequate knowledge of French is required for positions in Quebec.

Additional Information :

Position Type : Management

Job Status : Regular - Full Time

Job Location : Canada : Ontario : Mississauga Canada : Ontario : Ottawa Canada : Ontario : Toronto Canada : Quebec : Montreal

Work Arrangement : Hybrid