Security Analyst

[…], a national IT consulting company, is seeking a Security Analyst to support enterprise cybersecurity operations within a complex, distributed, and hybrid public-sector environment. The successful candidate will monitor and investigate network security events, support incident response activities, assess network security controls, and work with technical teams to identify and remediate cybersecurity risks.

The resource will work closely with network, infrastructure, cloud, identity, endpoint, application, and security operations teams to protect enterprise systems and information assets. This position requires strong network security expertise, analytical and troubleshooting skills, and the ability to clearly communicate technical findings to both technical and non-technical
stakeholders.

Responsibilities:

• Manage cybersecurity incident tickets and security service requests through ServiceNow.

• Monitor, analyze, and investigate network security events and anomalies across firewalls, intrusion detection and prevention systems, proxy services, secure web gateways, DNS security technologies, and other network security controls.

• Analyze network traffic, system logs, packet captures, and security alerts to identify indicators of compromise, suspicious communications, unauthorized access attempts, and potential data exfiltration.

• Participate in cybersecurity investigations and incident response activities, including threat identification, containment, remediation, packet capture analysis, and root cause determination.

• Support the implementation, administration, and continuous improvement of network security controls, including firewalls, network access controls, segmentation, VPNs, and secure remote access solutions.

• Review firewall rules, access control lists, network flows, routing paths, network configurations, and security policies to identify risks, misconfigurations, and unauthorized access.

• Assess network changes for potential security impacts and validate that approved changes have been implemented securely and correctly.

• Apply Zero Trust principles, network segmentation, least privilege access, secure remote access, and identity-aware security controls.

• Work with network, infrastructure, cloud, identity, endpoint, application, architecture, and security operations teams to assess and remediate vulnerabilities, configuration gaps, and cybersecurity risks.

• Document network security findings, risk statements, technical recommendations, operational procedures, remediation actions, and incident response activities.

• Prepare operational cybersecurity reports, incident reports, risk-management documentation, security metrics, and updates for management and organizational leadership.

• Support the execution and monitoring of phishing simulation exercises, including user targeting, response tracking, analysis, and reporting.

• Support cybersecurity awareness campaigns and provide security guidance to internal stakeholders.

• Respond to and resolve Privileged Access Management activities and service requests within established service levels.

• Maintain awareness of emerging network threats, attack techniques, vulnerabilities, and security technologies.

• Recommend improvements to security monitoring, threat detection, incident response, and prevention capabilities.

• Explain technical cybersecurity findings, risks, and recommendations clearly to both technical and non-technical stakeholders.

Requirements:

• Experience supporting enterprise security operations within complex, distributed, and hybrid technology environments.

• Experience working with the Government of Saskatchewan or comparable public-sector, government, Crown corporation, or similarly complex and regulated organizations is strongly preferred. This experience should include an understanding of the organization’s technical and business landscape.

• Strong understanding of firewalls, intrusion detection and prevention systems, VPNs, proxy services, secure web gateways, DNS security, load balancers, and network access controls.

• Experience reviewing firewall rules, access control lists, network flows, routing paths, network configurations, and security policies to identify risks, misconfigurations, and unauthorized access.

• Experience analyzing network traffic, logs, packet captures, and security alerts to support threat detection, cybersecurity investigations, and incident response.

• Working knowledge of TCP/IP, routing, switching, VLANs, NAT, DNS, DHCP, VPNs, wireless security, and common network protocols.

• Familiarity with Zero Trust principles, network segmentation, least privilege access, secure remote access, and identity-aware security controls.

• Experience documenting network security findings, risk statements, technical recommendations, operational procedures, and remediation activities.

• Familiarity with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, ISO/IEC 27002, and secure configuration baselines.

• Experience participating in formal change management processes, including reviewing network changes for security impact and validating implementation.

• Experience collaborating with network, infrastructure, cloud, identity, endpoint, application, and security operations teams.

• Strong troubleshooting, analytical, communication, documentation, and problem-solving skills.

• Ability to communicate technical findings clearly to technical and non-technical stakeholders.

• Diploma or degree in Cybersecurity, Network Engineering, Computer Science, Information Systems, or a related field, or equivalent practical experience.

• Professional certifications such as CISSP, CISM, CCNP Security, CCIE Security, Fortinet NSE, Palo Alto PCNSE, Check Point CCSA/CCSE, or CompTIA Security+ are considered assets.

• The consultant must be available to work full-time and 100% onsite at a Government of Saskatchewan office in Regina, Saskatchewan.

If you have this expertise and are legally able to work in Canada, please submit your resume. While we thank all candidates in advance for their application, only those candidates who are shortlisted will be contacted.