Gannett Fleming's Security and Safety services group provide technical, executive advise, and program support to help our clients to mitigate risks to the public, their personnel, and their property. Through security and safety analysis, planning, design, certification, and oversight solutions, we help our client’s protect the people and assets that are important to their mission and supporting our nation’s economy.

Our Toronto office is looking for a Senior Cybersecurity Analyst. Join the team!

As a Senior Cybersecurity Analyst, you will have a broad range of complex technical and professional work functions to analyze and protect IT and OT systems, network, and data across the enterprise. The role is technical and requires an in‐depth understanding of information and cyber security technologies and functions. The role also requires an understanding of business goals/strategy and operational requirements in a fast‐paced environment. The Senior Cyber Security Analyst leads the technical management internal security systems and manages assessments including remediation activities.

Responsibilities:

Leads security assessments of technology systems and recommends system changes to ensure adherence to standards, policy, guidelines, strategies, and security best business practices.
Generating, gathering, and tracking security metrics, developing scorecards for the metrics, and communicating the results to technology leadership.
Participates in planning sessions related to projects or new technologies to implement process improvement within the functional area.
Builds relationships with developers, stakeholders, and security champions, to incorporate security principles into engineering design and deployments.
Regularly research and learn new tactics, techniques, and procedures (TTPs) in public and closed forums, and work with colleagues to assess risk and implement/validate controls.
Basic understanding of ICS/SCADA cybersecurity controls and concerns.
Provides subject matter expertise to resolve problems, security incidents and conduct forensic investigations.
Understands the TCP/IP stack with prior hands-on expertise securing diverse LAN, WAN, VPN, and wireless environments for large organizations.
Develops and updates technical documentation (network architecture text and diagrams, security plan controls, and risk assessment, etc.)
Leads the evaluation and recommendation of hardware and software systems that provide security functions. Familiarity with and ability to investigate Intrusion Detection System (IDS) alerts Incident management, forensic investigation, response, and reporting.

Minimum Qualifications

Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field plus 5+ years of relevant experience.
10+ years of relevant work experience required to satisfy education and experience requirements.
Professional security‐related certifications (e.g. Security+, CISSP, CISM, CCSP, etc.)
Must possess excellent customer service, strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self‐motivated.
Proficient in securing Windows and *nix operating systems, endpoint applications, networking protocols and devices.
Experience with industry standard information security technologies.
Experience performing technical risk and vulnerability assessments.
Strong analytical skills with experience working in or supporting a Security Operations Center.

Preferred Qualifications

Expertise in performing cybersecurity assessments, risk management, governance, and compliance management.
Preferably some experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure.
Experience working within critical infrastructure systems, specifically rail transport experience would be a big plus.
Knowledge of Payment Card Industry (PCI), National Institute of Standards (NIST), Center for Internet Security (CIS) or International Standards Organization (ISO) requirements.
Working with U.S. Government agencies and having experience working with security requirements from DHS, CISA, and TSA.
Experience with Palo Alto, Darktrace, and Cisco security products a bonus.

At Gannett Fleming, we believe in improving the lives of the people we serve. We believe in innovation and social responsibility. We believe in the diversity of our team and the creative solutions they provide. We believe in embracing change and emerging technologies while maintaining an unmatched standard of quality. We believe in creating an environment where employees can thrive at home and at work. We believe in engaging our employees, building lasting relationships with our clients, and, in turn, making a difference in the world.

We offer a comprehensive benefits program, which includes medical, dental, vision and life insurance, our tax-deferred retirement plan, and the opportunity to incentive compensation for eligible positions. We are committed to your personal growth and professional development, so we offer tuition reimbursement, access to internal and external training programs and support active participation in professional organizations.

Gannett Fleming is an Equal Opportunity/Affirmative Action Employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veterans’ status or other characteristics protected by law.

Permanent Residency or Canadian Citizenship required for this position. No relocation assistance will be provided for this position. Local candidates will be given preference.

Unsolicited resumes from third party agencies will be considered the property of Gannett Fleming

Location: Toronto, ON

Core Business Hours: 8:00 AM – 5:00 PM
Employment Status: Full-Time

Internal Requisition ID: 2024-10745

Salary dependent upon experience and geographic location

#LI-KV1

#LI-hybrid

Gannett Fleming, Inc.

New Jobs

Senior Cybersecurity Analyst