Security Analyst

As a part of the Information Security team and reporting to the Supervisor Information Security, the Security Analyst is responsible for maintaining and enhancing the organization’s security posture. The position involves day to day operation and maintenance of security hardware and software, investigating and responding to security alerts and incidents in collaboration with the IT incident response team. The Security Analyst will create documentation for security investigations and security management, scan for and remediate vulnerabilities across networks, endpoints, and cloud services, and conduct assessments of new vendors, software, and hardware. The role answers security-related questions from users, stays updated on new and evolving threats, and recommends updated security measures as required.

The Security Analyst will support IT teams with security-related tasks, work towards the goals of the Information Security program, assist with legislative and external compliance, and collaborate with internal and external stakeholders.

DUTIES AND RESPONSIBILITIES (not listed in order of priority)

• Monitor and maintain deployed security software, and hardware.
• Investigate and respond to alerts from deployed security and monitoring software, SIEM, and SOC.
• Develop and document repeatable processes for security related investigations, configuration, and system management activities.
• Work as part of the Information Technology incident response team and respond to IT and security incidents as required.
• Scan networks, endpoints, and cloud services for vulnerabilities and monitor remediation efforts.
• Create and maintain scripts and automation for repeatable tasks.
• Conduct vulnerability assessments of new vendors, software, and hardware.
• Answer questions and provide training to users on security topics.
• Keep up-to-date on new and evolving threats and provide recommendations for patching, configuration changes, and new security controls.
• Provide support to IT teams for security-related tasks.
• Work as part of the Information Security team towards identified goals of the Information Security program.
• Collaborate with internal and external stakeholders to assist with required legislative and external compliance.
• Provide research, evaluation, and recommendations for new IT security solutions and threat countermeasures.
• Direct information security projects for deployment, configuration, testing, and documentation of new IT security solutions, including hardware and software.
• Perform other duties as assigned, including redeployment in emergency situations.
• Comply with provincial and County occupational health and safety legislation, regulations , policies and procedures.
• Maintain confidentiality in accordance with the Municipal Freedom of Information and Protection of Privacy Act.

CORPORATE COMPETENCIES

EDUCATION, TECHNICAL SKILLS AND CERTIFICATION

EXPERIENCE

EFFORT

WORKING CONDITIONS

Salary Grade

$85,831.00 - $104,432.00

Union

Non Union

The County of Simcoe thanks all applicants for their interest in this opportunity, but please note that only those candidates selected for an interview will be contacted.

Personal information provided is collected under the authority of the Municipal Act (2001) and will be used to determine eligibility for employment.

#J-18808-Ljbffr