Senior Security Analyst

• Assess, implement and improve security controls and tools to enhance security and compliance initiatives.
• Review current systems and implement changes that will enhance our security.
• Integrate security systems and automate frequent tasks
• Develop and report security metrics for systems within your scope for executive reporting.
• Keep up to date on technology, bring emerging risks to management attention and identify opportunities for improving existing security processes.
• Research and implement Baseline Security Standards across the organization.
• Participate in security incident response

• Security Control, Tooling & Systems Administration: Recommend, implement and administer our security tools and identify gaps in our capability that will allow us to discover and respond to emerging threats. Integrations include but not limited to SIEM, endpoint security, sSDLC, Cloud Infrastructure, Microsoft 365, Azure AD, VPN, Zero Trust, Corporate SaaS systems. Define and create automation and integration between systems and to help identify gaps and produce actionable metrics.
• Identity and Access Management: Integrate our many tools and systems into our central identity provider. Define role design requirements and ensure the implementation of least privilege. Modernize our remote access following a zero-trust methodology.
• Product, Cloud & SaaS Security: Assess and enhance the security of our products, development environments, Cloud and SaaS environments by building our capability to protect, detect, monitor and respond to threats. Ensure that our cloud environments have the necessary security services and controls in place to protect our products and infrastructure. Work with system and product owners to mitigate discovered security issues.

• 3-5+ Years of relevant experience in at least 3 security domains
• Experience in implementing security systems and controls

• Well developed technical skills, a strong familiarity with network, system and application security, and an understanding of the technical security landscape
• Excellent automation, system integration and scripting knowledge
• Excellent organizational skills
• Good understanding of security standards (NIST, CIS, OWASP, CSA, etc.)
• Excellent knowledge of IT systems and security infrastructure (firewalls, anti-malware, logging, authentication, VPN, web, MDM, SIEM, endpoint security, etc)
• Experience with securing cloud environments (AWS, Azure, GCP) and SaaS applications (MS 365, Salesforce, password managers, etc.)
• Experience in secure software development methodologies and SAST/DAST pipeline integrations.
• Self-motivated with the ability to work independently and manage time effectively with limited direction at times
• Superior analytical and problem-solving capabilities
• CISSP, SSCP, OSCP, and other security certifications & training an asset

• Analysis
• Communication
• Problem Solving
• Analytical Thinking
• Self-starter

• Smooth operation of security controls & tooling.

• Coverage of security controls across the organization
• Identification and tracking of security exposures
• Completion of assigned projects and assessments
• Tracking and reporting of security metrics

Euna Solutions