Security Analyst

• Identify application-level security risks at each stage of development and ensure risks are assessed and mitigated
• Integrate static and/or dynamic code analysis tools into the software development lifecycle
• Arrange or conduct vulnerability and penetration tests against defined systems
• Monitor application security trends and evolving technologies
• Keep senior management informed about application security issues and implications for Kinaxis
• Assist with risk assessments, threat modeling, and product security reviews
• Review and triage SAST and SCA reports
• Work with developers to prioritize and remediate findings
• Help maintain and fix issues in CI/CD pipelines
• Implement enhancements to in-house custom-built security tools
• Partner with Corporate IT, Cloud Services, Product Development, and technology partners to implement security solutions and controls
• Gain exposure to the full software development lifecycle, threat modeling, static/dynamic analysis, vulnerability management, and offensive security

Co-op/Intern Application Security Analyst

• Create, configure and maintain security solutions on Enea client platforms
• Monitor the telecoms threat landscape and maintain current knowledge of relevant security developments
• Analyse customer deployment data to identify, investigate and document potential threats
• Deliver security reviews for Enea clients
• Respond independently to client questions and manage expectations
• Communicate findings to technical and non-technical audiences, including commercial considerations
• Work independently on assigned activities while collaborating with regional and global Threat Intelligence colleagues
• Participate in scheduled shift coverage, including some Saturday or Sunday work

Junior Security Analyst

• Define, develop, and implement Technology Controls and Information Security policies, programs, standards, processes, and tools
• Provide expertise on assessing risks, identifying control gaps, and developing risk-mitigation solutions
• Support the Bank’s End-User Computing governance program, including asset classification, attestation, risk and control assessments, thematic remediation, high-risk mitigation, standards enhancement, stakeholder guidance, governance reporting, learning content, and intake management
• Advise business, technology, and control partners on EUC governance and information-security requirements
• Serve as an EUC risk and technology subject matter expert
• Conduct or support inherent risk and control-gap assessments and guide remediation strategies
• Coordinate intake, review, prioritization, and assignment of EUC-related requests
• Develop and maintain EUC governance content, procedures, learning materials, and knowledge resources
• Lead or support stakeholder engagement sessions, office hours, and knowledge-sharing activities
• Maintain the EUC Book of Record through classification, attestation campaigns, monitoring, data-quality reviews, and assessment of asset changes and risk indicators
• Support thematic analysis, corrective-action tracking, high-risk asset mitigation, and management reporting
• Develop EUC risk reporting and monitor KPIs and KRIs
• Perform or support quality assurance and quality control reviews
• Support internal audits, regulatory examinations, compliance reviews, and remediation tracking
• Monitor emerging technology, security, regulatory, and industry developments
• Identify and escalate key risks and issues
• Participate in business-specific, cross-functional, and enterprise initiatives
• Contribute to knowledge transfer, documentation, training, and learning activities
• Influence stakeholder behaviour to reduce risk and promote technology risk management

Information Security Analyst

• Support implementation of technical and administrative data-protection controls aligned with the data governance and protection strategy and client objectives
• Evaluate technologies related to data protection based on organizational and client requirements
• Participate in cross-functional initiatives to optimize data protection and develop governance policies in a multi-client service delivery environment
• Collaborate with internal and external stakeholders to advance the data governance and protection practice
• Implement and automate processes that strengthen data protection capabilities and improve the security posture of a multi-client environment
• Document data governance and protection processes, workflows, and best practices
• Apply continuous improvement principles using a data-driven approach

Security Analyst II – Governance, Data Protection

• Manage security event monitoring and incident response ticket queues
• Triage security events in line with service level agreements and objectives
• Investigate alerts and anomalies using endpoint detection and response tools
• Build accurate timelines of potential threats and possible compromise
• Translate cybersecurity concepts into non-technical language for clients
• Communicate indicators of compromise, isolation, and remediation steps
• Analyze system, security, and application logs to diagnose faults and identify abnormal behavior
• Investigate, escalate, contain, or eradicate malicious activity
• Prepare and deliver written and oral security reports and metrics
• Recommend improvements to internal processes and procedures
• Participate in threat hunting activities and special projects

IT Security Analyst I

• Serve as the organization’s primary internal coordinator for cybersecurity procedures, monitoring, reporting, and continuous improvement
• Oversee the managed service provider’s security services
• Review the MSP’s work and recommendations
• Coordinate internal responses and ensure identified risks and required actions are addressed
• Manage recurring security reviews, reporting, incident and vulnerability follow-up, documentation, and customer security audits
• Present security findings, risks, and recommended strategies to senior management, customers, and internal staff
• Support the CIO and IT Manager

IT Security Analyst II

• Support the organization’s compliance with regulatory, statutory, contractual, and internal security requirements
• Maintain information security policies, standards, and guidelines
• Participate in audits and assessments to identify compliance gaps
• Partner with Legal on contract updates needed to maintain compliance and risk posture
• Participate in risk assessments and assist teams with remediating compliance gaps
• Track and manage risk exceptions with appropriate documentation and approvals
• Support internal, external, regulatory, client security, and third-party audits
• Prepare and provide evidence demonstrating compliance
• Monitor audit findings and corrective actions
• Facilitate management updates with ISO ISPMS Leads
• Stay informed about regulatory changes and industry trends
• Recommend and implement compliance program improvements
• Support security and compliance tools, processes, and frameworks
• Contribute to risk mitigation through Threat Modeling results and Post-Security Reviews
• Maintain security operations documents, including Incident Response Plans, runbooks, Incident Management, and Business Continuity/Disaster Recovery plans
• Coordinate and review penetration testing results
• Support the Information Security strategy and roadmap
• Track and report compliance with international regulations such as the EU CRA and EU Radio Equipment Directive
• Maintain and update the organizational Risk Register

Senior Information Security Compliance Analyst

• Triage incoming bug bounty reports by reviewing quality, validating findings, assessing impact, identifying duplicates, and routing reports
• Triage vulnerabilities from vulnerability management activities and track them through assessment, remediation, and closure
• Work with PSIRT engineers and development teams to gather technical details, reproduce issues, and clarify affected products, versions, and configurations
• Support severity assessment using CVE, CVSS, CWE, and OWASP frameworks and terminology
• Communicate with security researchers involved in coordinated vulnerability disclosure and bug bounty programs
• Prepare information for CVE assignment and maintain accurate records as a CVE Numbering Authority
• Represent GitLab as an acting CNA representative in CVE-related discussions and operations
• Draft and coordinate customer-facing communications about vulnerabilities, fixes, mitigations, and releases
• Maintain issue records, timelines, researcher communications, remediation status, and follow-up actions
• Monitor queues and operational metrics to identify trends, aging items, recurring issues, and improvement opportunities
• Create and improve runbooks, procedures, templates, and documentation
• Participate in incident handoffs, root cause analysis documentation, lessons-learned activities, and product security reviews
• Build expertise in PSIRT, bug bounty, vulnerability management, and coordinated vulnerability disclosure

Intermediate Security Analyst, Vulnerability Operations

• Collaborate with stakeholders involved in cybersecurity monitoring and alerting
• Create and enhance monitoring use cases, alerts, and dashboards, and track the progress of mandates associated with these activities
• Establish and regularly review monitoring and alert management practices
• Measure the effectiveness of existing security controls
• Establish and maintain appropriate documentation
• Collaborate with cybersecurity technology analysts to provide subject-matter expertise

Cybersecurity Analyst – SIEM/SOAR

• Collaborate with stakeholders involved in cybersecurity monitoring and alerting
• Create and improve monitoring use cases, alerts, and dashboards, and track the progress of related initiatives
• Establish and regularly review monitoring and alert-management practices
• Measure the effectiveness of existing security controls
• Develop and maintain appropriate documentation
• Collaborate with cybersecurity technology analysts by providing subject-matter expertise

Security Analyst jobs in Canada