The Cyber Security Operations Centre Analyst will be working in a fast paced and innovative environment for one of North America’s top airlines. The Cyber Security Operations Centre Analyst position requires information gathering, analytics aptitude and problem-solving skills. Cyber security threats continue to evolve, and the Cyber Security team will evolve with it. The Cyber Security Operations Centre is the first line of defense to protect Air Canada and our customers. This position reports to the Manager of the Cyber Security Operations Centre.

Support security monitoring, response, and remediation activities of Air Canada’s technology environmentAct as an incident responder and first line of defense, identify and respond to cyber security.Support the steady state operations of our enterprise security monitoring and response toolsDevelop and provide input into standard operating proceduresMeasure and report on key service-level metrics showcasing the effects of the Cyber Security Operations programGenerate security incident reports and dashboards for IT administrators and business managers to evaluate the efficacy of security monitoring and responsive capabilitiesPerform technical investigations to identify abuse and misuse of systems and processesWork with relevant stakeholders (Which may include customers, partners, and internal teams) and collect information while investigating a potential cyber security threat to Air CanadaReviewing and analyzing data from multiple internal and external stakeholdersCommunicating analysis results and making recommendations to relevant stakeholdersBuild relationships throughout the organization to enhance and support our focus on safe, secure, and reliable operationsMaintain up-to-date understanding of security threats, and countermeasures. Which may include but not limited to monitoring illicit communication channels. Act as the subject matter expert on behalf of the Cyber Security Operations CentrePerform Digital Forensics, Incident Response (DFIR) and threat hunting activities using relevant actor TTPs and IOCs 

A relevant University degree/technical certification, and/or relevant experience commensurate to the role2-3+ years of IT technology or operations experience in a large companyCertification in Information Security (Security+, GCIA, OSCP or any other blue team training) is a plusStrong technical background in various operating systems, networks, applications, databases, and cloudAbility to communicate effectively and to work collaboratively with all levels of the organization with superior verbal and written skillsSuperior customer service and client interfacing skillsAbility to work effectively under pressure and in rapidly changing environments or uncertain conditions.Openness and willingness to adapt to different and new ways of doing things passion for Service ImprovementAbility to work cooperatively with others on a team, and to establish and maintain effective business relationshipsDemonstrate punctuality and dependability to handle multiple tasks, learn quickly, handle a high volume of activity, to support overall team success in fast-paced environment

Candidates must be eligible to work in the country of interest, at the time any offer of employment is made and seeking any required work permits/visas or other authorizations which may be required is the sole responsibility of the candidates applying for this position.

Diversity and Inclusion

As an equal opportunity employer, we welcome applications from all to help us build a diverse workforce which reflects the diversity of our customers, and communities, in which we live and serve.