Data. Discovery. Better Health.

ICES is a world-leading health research and analytics institute. With a wealth of data and analytic expertise, we create trusted evidence that has changed health policy and practice and helps ensure better health for all.

Ready to discover more with us? Join our outstanding, collaborative team where your skills, knowledge and curiosity are valued and can change the future of health care.

At ICES, we recognize what matters most to our employees. Some of the great benefits of working at ICES include:

Flexible remote work arrangements anywhere in Ontario
Competitive Compensation
Comprehensive Benefits Program
HOOPP Pension Plan (Defined Pension)
Employee Assistance Program and Dialogue Well Being Program
Generous vacation, float and caregiver days for all employees
Education Fund and Dedicated Education Days
Holiday Closure
Perkopolis Employee Discount Program

Introduction:

Reporting to the Manager, Cybersecurity, the Cybersecurity Analyst will perform proactive identification and resolution of weaknesses and threats in our web applications, systems and Cybersecurity program. Analyzing, reviewing, reporting and effectively articulating findings and recommendations based on findings is key for this role

Responsibilities of the position include, but may not be limited to:

Conduct vulnerability OS, database, and web application scans and provide guidance to address existing vulnerabilities;
Conduct testing, automation and implementation of security controls, and draft documentation such as policies and procedures;
Support the ongoing maintenance of the vulnerability management program;
Execute and support risk management service (e.g. TRAs, vulnerability assessments and penetration testing);
Support the execution of the organization’s user awareness program;
Support the assessment, implementation and deployment of new technology and initiatives throughout their lifecycle;
Discover threats, vulnerabilities and exploits through architecture design review, threat modeling and code review of web applications;
Help with tool identification, onboarding and/or tools development to assist developers in the secure development of applications;
Monitor information security related websites and stay up to date on current attacks and trends;
Offer recommendations on the architecture design and remediation guidance to IT project teams and management
Communicate issues/concerns to the Manager, Cybersecurity and the Information Technology department as necessary;
Actively participate in the Cybersecurity services process development and support;
Complete tasks designed to ensure security of the organization's systems and information assets;
Other duties as may be assigned within the scope of this position.

Knowledge, skills and abilities required:

Bachelor’s Degree in a related field, and/or equivalent professional level work experience
Four (4) years of experience in Cybersecurity;
Minimum four (4) years of experience in vulnerability management, firewall configuration and EDR/XDR endpoint security suite
Working knowledge of NIST Cybersecurity Framework;
Knowledge of software and web applications vulnerabilities frameworks such as OWASP Top 10 (Web and Mobile), SDLC, CI/CD;
Experience with both Linux and Windows environments;
Working knowledge of user awareness platforms and programs;
Experience and/or knowledge with vulnerability scanners;
Experience working with EDR/XDR endpoint security suites;
Strong knowledge of Next-Generation Firewalls (NGFW) and VPN products;
Knowledge of Active Directory, Microsoft Exchange, and storage systems;
Excellent verbal, written, analytical, and interpersonal skills;
Excellent problem-solving techniques and listening skills;
Ability to work independently and as part of a team;
Flexibility and ability to work under pressure to manage multiple competing priorities within tight deadlines;
Ability to work effectively and collaboratively with internal staff, scientists, external partners and stakeholders

Security clearance may be required.

Interested candidates should submit their resume and cover letter detailing how their knowledge, skills and abilities match the scope of this position.

We thank all applicants for their interest in working at ICES. Due to the volume of applications received, only applicants being considered for the position will be contacted for further discussions.

ICES is committed to providing accessible employment practices, in compliance with the Accessibility for Ontarians with Disabilities Act, 2005 (AODA). Applicants are asked to make accommodation requests to ICES and we will make every effort to ensure that accommodation requests are met throughout the recruitment process.

ICES Central

New Jobs

Cybersecurity Analyst