Technology Security Operations Analyst

Job Summary

Reporting to the Senior Manager, Technology Operations, the Technology Security Operations Analyst is primarily responsible for the implementation,maintenance and monitoring of security related technologies and components, as it relates to the corporate infrastructure and software systems.

Duties & Responsibilities

• Work closely and cooperatively with all teams within the organization to ensure effective application and adherence to the corporate security policies and procedures
• Triage security issues and if required, engage with internal teams and/or external vendors, to ensure prompt remediation of issues, escalating as necessary to ensure the right level of urgency and engagement
• Provide security incident report on impact and remediation steps to Management
• Advocate for security best practices and build good working relationships within the organization
• Implement and maintain systems, tools and controls to monitor all Technology systems for unusual behavior or breachesInvestigate suspicious activities, contain and prevent them
• Configure and manage Incident Detection and Response (IDR) software and Vulnerability Management (VM) software
• Schedule, install and ensure compliance of security patches for all endpoints and servers
• Manage and maintain access to AWS resources and services, as well as bot protection software and web application firewalls (WAF)
• Accurately manage and audit access to resources, including domain, system, application and network
• Create and maintain SSL certificates
• Work with the IT Support team to implement and maintain corporate anti-virus, anti-malware and spam filtering coverage
• Perform routine audit and exception reporting
• Participate in internal and external security audits and vulnerability testing of all security procedures on a periodic basis
• Assist in the development and maintenance of internet access filtering policies and work with the IT Support team to implement and maintain the internet access filtering and controls
• Participate in the development of infrastructure, application systems, network security and mobile device policies
• Maintain accurate documentation and schematics of all security flow processes at the system, application accessibility and infrastructure levels
• Maintain current knowledge of industry, governmental and corporate certifications, standards and policies
• Participates in PCI-DSS and NI 52-109 projects as a technology resource
• Assist with the maintaining, remediation for NI 52-109 certification requirements and participate with the audit process as requested by the Senior Manager, Technology Operations
• Maintain, remediate PCI-DSS certification requirements and participate with the audit process
• Actively participate in Porter’s Safety Management System (SMS) including reporting hazards and incidents encountered in daily operations. Understand, comply and promote the Company Safety Policy
• Participate in after hours, on call rotation
• Any other duties as assigned
  
  

Behavioural Competencies

• Concern for Safety: Identifying hazardous or potentially hazardous situations and taking appropriate action to maintain a safe environment for self and others
• Teamwork: Working collaboratively with others to achieve organizational goals
• Passenger/Customer Service: Providing service excellence to internal and/or external customers (passengers)
• Initiative: Dealing with situations and issues proactively and persistently, seizing opportunities that arise
• Results Focus: Focusing efforts on achieving high quality results consistent with the organization’s standards
• Fostering Communication: Listening and communicating openly, honestly, and respectfully with different audiences, promoting dialogue and building consensus
  
  

Qualifications

• Eligible to work in Canada
• Bachelor’s degree or diploma in Information Technology/Computer Systems (or equivalent experience)
• 3+ years experience in information technology
• 2+ years of experience in Amazon Web Services (AWS)
• 2+ year of experience in information security and application security
• Strong knowledge of Windows operating systems and MS-Active Directory, as well Microsoft server concepts and processes
• Experience with anti-virus, anti-malware management and vulnerability scanning tools
• Highly motivated and willing to take initiative
• Excellent analytical skills
• Scripting/coding experience an asset
• Ability to work in a team environment or individually as required
• Certification in information security disciplines is an asset
• Penetration Testing experience is an asset
• Ability to travel when required (including travel to international destinations requiring a valid passport or visa)
• Availability to work off hours (including evenings, weekends and holidays) when necessary
• Understanding of PCI/DSS and 52-109 regulations and other regulatory requirements
• Dependability (must have a clear attendance record and reliable on time reporting for work)
  
  

Location

Toronto Downtown Office (250 Yonge Street)

Company Description

Since 2006, Porter Airlines has been elevating the experience of economy air travel for every passenger, providing genuine hospitality with style, care and charm. Porter’s fleet of Embraer E195-E2 and De Havilland Dash 8-400 aircraft serves a North American network from Eastern Canada. Headquartered in Toronto, Porter is an Official 4 Star Airline® in the World Airline Star Rating®. Visit www.flyporter.com or follow @porterairlines on Instagram, Facebook and Twitter.