Senior Cybersecurity Analyst

Encore Technical Solutions Inc. • Full-time • Greater Toronto Area, Canada, CA • 1d ago

Senior Cybersecurity Analyst

Toronto, ON | Permanent, Full-Time

The Role

Reporting to the Director of Cybersecurity, you’ll be a senior hands-on member of the security team. You’ll own detection and response, drive vulnerability remediation, and help set the direction of the security program. You’ll also be the go-to security expert for IT and business partners across the organization.

What You’ll Do

Detection & Incident Response

Triage and investigate security alerts across endpoint, network, identity and cloud environments
Lead investigations into phishing, malware, ransomware, account compromise and insider-risk events
Find root causes and coordinate fixes with internal teams and third-party providers
Build and refine IR playbooks, runbooks and escalation paths
Take part in a shared on-call rotation

Threat Hunting & Risk

Track the threat landscape and turn intelligence into improved detections
Run proactive threat hunts using available telemetry
Recommend practical, risk-based improvements to security controls

Vulnerability Management & Hardening

Run vulnerability scanning and assessments across on-prem, cloud and application environments
Work with infrastructure and application owners to prioritize fixes by risk
Maintain hardening baselines aligned to CIS, NIST and ISO 27001
Report on remediation progress, trends and key metrics

Security Tooling & Automation

Manage and tune the security stack: SIEM, EDR/XDR, IDS/IPS, email security and scanning tools
Automate repetitive work through scripting and SOAR-style workflows
Evaluate and help roll out new security technologies

Governance & Awareness

Support compliance work across PCI DSS, ISO 27001, NIST and Canadian privacy requirements
Contribute to audits, risk assessments, control documentation and policy updates
Help raise security awareness through training and practical guidance for staff

Leadership

Mentor junior analysts and share knowledge across the team
Contribute to the long-term cybersecurity roadmap
Partner with infrastructure, cloud, networking, privacy and business teams

What You Bring

5+ years of hands-on experience in security operations, incident response or threat management
A degree in Computer Science, IT, Information Security or a related field (or equivalent experience)
Strong working knowledge of SIEM, EDR/XDR, vulnerability management, firewalls/networking, IAM, authentication and encryption
Experience with the Microsoft security stack: Defender XDR, Sentinel, Intune and Entra ID
Cloud security experience in Azure, AWS or GCP; hybrid environments are a plus
Scripting skills in PowerShell, Python or similar are an asset
Experience in a regulated or enterprise environment is an asset
Certifications such as CISSP, CISM, GIAC, SC-200, AZ-500 or CEH are strongly preferred
Clear communication, including the ability to explain technical risk to non-technical audiences
Strong organization and judgment when juggling competing priorities