Analyst, Cyber Security

About the Role

As a member of the BSG Cybersecurity team, reporting to the Director of Cyber Security and under the operational direction of the Cybersecurity Manager, the Cyber Security Analyst will strengthen our security operations and protect our cloud-based infrastructure. You will leverage hands-on expertise in Microsoft Azure, Office 365 Security, Exchange Online Protection (EOP), and Microsoft Purview to monitor, detect, and mitigate evolving security threats. This role is pivotal in driving effective incident response and ensuring continuous protection of our information assets.

Key Responsibilities

• Security Monitoring & Threat Detection:
  Monitor and analyze security alerts from Microsoft Defender, Sentinel, and EOP. Investigate and respond to phishing, malware, and insider threats. Conduct forensic analysis and threat hunting using Microsoft Purview and Azure security tools.
• Incident Response & Threat Mitigation:
  Lead incident response efforts by identifying, containing, and eradicating security threats. Develop and execute incident response playbooks for cloud and email security incidents. Coordinate with IT and security teams to remediate threats and ensure business continuity. Document incident findings, perform root cause analysis, and conduct post-incident reviews.
• Cloud Security & Compliance:
  Manage security controls and policies in Microsoft 365 Defender and Azure Security Center. Ensure compliance with standards such as GDPR, ISO 27001, and NIST through Microsoft Purview Compliance Manager. Implement and optimize email security policies (EOP, Defender for O365) to minimize phishing risks.
• Identity & Access Management (IAM):
  Configure and monitor Azure AD Conditional Access Policies. Analyze and mitigate risky sign-in activities and MFA bypass attempts. Secure privileged access using Privileged Identity Management (PIM).
• Data Protection & DLP:
  Implement Data Loss Prevention (DLP) policies using Microsoft Purview. Enforce email encryption, sensitivity labels, and insider risk policies. Monitor and respond to potential data exfiltration attempts.

Knowledge and Experience Required

• 3+ years of experience in Cyber Security or Cloud Security.
• Strong knowledge of Microsoft Security solutions, including Azure, Office 365, EOP, and Microsoft Purview.
• Hands-on experience with SIEM tools (Microsoft Sentinel preferred).
• Familiarity with email security, phishing detection, and incident response practices.
• Knowledge of PowerShell and KQL scripting for security automation is a plus.
• Preferred certifications include AZ-500, MS-500, SC-200, CISSP, or CEH.
• Excellent communication skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders.

Note: Offices continue to be central to collaboration and Brookfield’s identity. This position requires the employee to be on-site for a minimum of 4 days to perform most effectively.

Working here, you will enjoy:

At Brookfield, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential.

• We work to recognize you in meaningful, personalized ways including a competitive salary, bonus structure, a health benefits program, and defined contribution pension plan.
• Our spaces are open, dynamic, and collaborative, giving you access to different businesses and teams. For your wellbeing, our building is equipped with a modern gym, bike storage, and healthy snacks and drinks.
• We cultivate a culture where we invest in your growth and development.

Diversity & Inclusion

Brookfield Renewable embraces and promotes the principles of diversity, equity, and inclusion. We welcome and encourage applications from all qualified candidates, including women, Indigenous peoples and other persons of all races, ethnic origins, religions, abilities, sexual orientations, and gender identities and expressions. We also provide accommodation during all parts of the hiring process, upon request. If contacted to proceed to the recruitment process, please advise us if you require any accommodation.