Cybersecurity Analyst – Operational

Here's a brief overview of the tasks and responsibilities you'll have :

• Ensure the security of technological operations from a digital sovereignty perspective, contributing to data protection and the control of risks related to technological dependencies;
• Continuously monitor for threats, vulnerabilities and risks that may affect operations, and make recommendations to support decision-making;
• Assess the impacts of known vulnerabilities on the infrastructure and technology components used, and maintain up-to-date knowledge of the assets involved;
• Advise the responsible teams on requirements and security considerations related to development, technology architecture, operations and project planning;
• Collaborate in the change management process by assessing risks and potential impacts on the security of operations;
• Contribute to information security risk analyses, identify threats and vulnerabilities, and recommend appropriate mitigation or mitigation measures;
• Participate in the development, updating and evolution of security incident response plans and procedures, including the required escalation and coordination mechanisms;
• Configure, maintain and optimize security monitoring tools, provide daily monitoring of environments and analyze logs and events when required;
• Perform security operational activities, including those related to managing elevated privileges, access, and decompartmentalization requests;
• Coordinate activities during events or security incidents, participate in crisis units and monitor containment, correction and remediation measures;
• Produce and maintain required documentation, including incident reports, cause analyses, post-incident reports, and safety event logs;
• Follow up on recommendations and corrective actions arising from incidents, vulnerabilities and risk analyses;
• Participate in the continuous improvement of operational cybersecurity practices and procedures as well as the evolution of performance indicators, monitoring mechanisms and the quality of security services.

The profile you are looking for is as follows:

• Bachelor's degree in computer science, information technology, information security or a related field, or an equivalent combination of relevant education, experience and certifications;
• Have at least ten (10) years of experience in cybersecurity, including a minimum of five (5) years specialized with the Microsoft Security suite;
• Hold a recognized certification of specialization in the field of information technology;
• Have experience in information security, with a minimum of five (5) years;
• Master the principles, methodologies and standards in information security and operational cybersecurity;
• Knowledge of security platforms and technologies, including detection, protection, and monitoring tools;
• Understand technology architecture, multi-environment infrastructures, networking concepts, and identity and access management;
• Knowledge of information technology governance, government information security guidance, and recognized best practices, including those of NIST;
• Master the Office suite;
• Demonstrate an excellent command of French and English, both oral and written;
• Strong technical, analytical, interpersonal, and writing skills;
• Demonstrate a capacity for synthesis and an ability to popularize and present technical concepts or complex issues to different audiences, including managers and technical users;
• Effectively write technical and analytical documents, including procedures, reports, benchmarking, and cause analysis;
• Demonstrate rigor, excellent organizational skills and an ability to intervene quickly in an operational context;
• Have a good knowledge of the government and health sector context and their technology and information security orientations (an asset);
• Hold a relevant Microsoft security certification, including Azure Security Engineer Associate, Security Operations Analyst Associate, or equivalent certification (an asset).