Staff Information Security Analyst

Description

The security organization's team builds security solutions that lower risk and protect the company and its customers. It helps customers move their most sensitive data and workloads to the cloud.

The Global Security Support Center is a group of skilled security professionals. They strengthen security internally and externally, work with teams across the company, and are the main security contact for customers.

The center provides internal and external security support for the security organization, aiming to raise customers' security posture and earn their trust.

Responsibilities

• Represent the security organization in customer-facing work on incidents, cases, findings, tasks, questions and calls about security and privacy.
• Own, triage, investigate and respond to security issues on the platform, keeping communication timely and customer experience strong.
• Serve as the main security contact for internal and external stakeholders on all security matters.
• Coordinate the triage and workflow of security incidents and cases with customers and other internal teams.
• Earn and keep customer trust through high-quality service and clear communication.
• Lead customer outreach on security and manage escalations.
• Apply capability maturity models to refine security processes.
• Create and improve documentation and processes to mature security and operations.
• Build and deliver security training and enablement for internal and external customers on awareness and best practices.
• Build AI solutions that automate repetitive work and design new AI-based solutions.
• Work with Legal on security and privacy matters, and with a global team across time zones, which requires flexible hours.
• Serve as a responsible on-call resource on rotation, including weekends, public holidays and after hours.

Requirements

• A minimum of 8 years of professional experience in information security or application security, or equivalent experience combined with education.
• Eligibility to obtain and hold reliability status in Canada.
• Solid grasp of cloud computing models and major hyperscaler platforms.
• Hands-on experience with security tools such as SIEM, logging tools, load balancers, firewalls, WAFs, IDS/IPS, vulnerability management platforms and encryption techniques.
• Basic to intermediate Java or JavaScript skills, enough to read code and explain what it does.
• Intermediate to advanced skill with web proxy tools for security testing and assessments.
• Deep knowledge of web application vulnerabilities such as the OWASP Top Ten, and how to mitigate them.
• Ability to explain security risk to non-technical stakeholders in plain language.
• Good knowledge of compliance and regulatory frameworks such as NIST, CIS, GDPR, HIPAA, PCI DSS and ISO standards.
• Experience with AI technologies and designing AI-based solutions.
• Strong analytical and problem-solving skills for complex security challenges.
• Excellent verbal and written communication, including explaining technical topics to non-technical audiences.
• Ability to work well in a collaborative team using a follow-the-sun model.
• Clear understanding of security concepts, explained without jargon that customers can follow.
• Preferred: a bachelor's degree in computer science or information security, or relevant security experience.
• Preferred: hands-on experience exploiting web-based vulnerabilities, which is a strong advantage in this role.
• Preferred, two or more of these certifications: the company Certified System Administrator (CSA), Azure AI Fundamentals, AWS Certified AI Practitioner, Offensive Security Web Assessor (OSWA), GIAC Web Application Penetration Tester (GWAPT), GIAC Security Essentials Certification (GSEC), GIAC Certified Incident Handler (GCIH), CISSP, CISM.

Conditions

The role may require access to a Protected B cloud environment.

You must be eligible to obtain and maintain Government of Canada Reliability Status under PSPC's Contract Security Program. Clearance is a condition of employment in this function. The company will sponsor and support screening through its designated Company Security Officer.

Work persona (flexible, remote or required in office) is assigned based on the nature of the work and your work location. The company may use a third-party service to check the distance between your home and the nearest office.

Equal opportunity applies to all candidates.

Benefits

• Base pay is $109,400 - $191,500 for this location, plus equity where applicable, variable or incentive pay and benefits. Sales roles generally include an On Target Earnings (OTE) incentive structure.
• Base pay is a guideline. Individual total pay depends on qualifications, skill level, competencies and work location, and pay is based on the role's geographic location and may change.
• Health plans, including flexible spending accounts, an employee stock purchase plan, matching donations, a flexible time away plan and family leave programs.