Cyber Vulnerability Analyst

Metrolinx

Job Location:

Toronto - Canada

Monthly Salary: Not Disclosed

Posted on: Yesterday

Vacancies: 1 Vacancy

Job Summary

Description

Metrolinx is connecting communities across the Greater Golden Horseshoe. Metrolinx operates GO Transit and UP Express as well as the PRESTO fare payment system. We are also building new and improved rapid transit including GO Expansion Light Rail Transit routes and major expansions to Torontos subway system to get people where they need to go better faster and easier. Metrolinx is an agency of the Government of Ontario.

At Metrolinx equity diversity and inclusion are essential to living our values of serving with passion thinking forward and playing as a team.

This role is an inoffice position based at our 277 Front Street office location. Our team is highly collaborative and much of our work benefits from inperson cocreation relationshipbuilding and handson partnership with leaders across the organization.

We are looking for a Cyber Vulnerability Analyst who will safeguard our technology assets against internal and external security threats to the confidentiality integrity and availability of business information and systems by analyzing and identifying cybersecurity vulnerabilities and support their remediation across IT infrastructure applications and Operational Technology (OT) devices.

What will I be doing

Perform cybersecurity vulnerability scanning to discover and analyze vulnerabilities and characterize risk to networks operating systems applications databases and other Information Technology (IT) and Operational Technology (OT) system components
Perform vulnerability end-to-end process and procedures including reporting of vulnerability escalation of critical vulnerabilities and tracking patching/remediation efforts
Perform compliance scanning to analyze configurations and facilitate implementation of configurations and hardening settings according to Metrolinx standards and policies for network devices operating systems IT and OT endpoints
Maintain configuration control of Vulnerability Management (VM) hardware systems and application software; coordinate upgrades and other maintenance activities on VM tools.
Analyze assessment results and threat feeds to properly react to security weaknesses or vulnerabilities.
Facilitate internal audits vulnerability testing and 3rd party pen testing activities.
Work with the IT Security Operations and IT Operations teams in supporting Cybersecurity incident response activities and reporting
Engage and collaborate with various teams across the organization along with third party vendors to update develop technical documentation and associated reports as required
Monitor security alerts and participate in security incident management and response
Participate in evaluating recommending implementing responding and troubleshooting security solutions
Act as a subject matter expert in the support of internal client support development and validation teams. Leverage industry standard and recognized provincial security control frameworks to advance minimum privacy and security practices and specifications
Participating in incident response and technical investigations as needed.
Researching vulnerabilities/threats and writing technical and non-technical reports for management
Collaborate with stakeholders to map out the inventory of devices used throughout Metrolinx to identify remediate and patch vulnerabilities or implement compensating controls.
Proactively identify highlight and raise emergent and urgent critical vulnerabilities to Cyber Vulnerability Manager and appropriate IT and Cybersecurity teams to mitigate protect and prevent threats to Metrolinx systems and services.
Participates in the 24x7 Information Security Response team; participates in cross-functional team meetings to remediate identified security risks and close out pending action plans

What Skills and Qualifications Do I Need

Completion of a degree in Computer Science Information Technology (IT) or a related discipline or a combination of education training and experience deemed equivalent
Demonstrated years experience developing and implementing system security controls remediation of security issues and identifying and managing threats to the achievement of business objectives; project management experience; and broad-based experience in the CISSP security domains.
Experience with IPS/IDS SIEMs and other security tools
Experience performing security/vulnerability reviews
Experience with cloud security
Experience with Operational Technology considered an asset
Certified Information Systems Security Professional (CISSP) CCSP (Certified Cloud Security Professional) Security Cisco Certified Network Associate (CCNA) GIAC or other similar credentials considered an asset
Understanding of application systems database operating system and endpoint device (laptops desktops) hardening techniques and standards
Operational experience with vulnerability management patch management and cybersecurity tools such as Qualys Tennable Rapid7
Strong communication skills and the ability to understand and translate cyber security threats from a technical perspective to business-line understanding and execution; ability to communicate risks and propose counter measures to senior technology executives.
Well-developed analytical qualitative and quantitative reasoning skills and demonstrated creative problem-solving abilities with complementary skills for log analytics and diagnosis skills utilizing regular expression and/or scripting.
Strong research background utilizing an analytical approach
Candidate must be able to react quickly decisively and deliberately in high stress situations
As a member of the 24x7 Information Security Response team position may be required to be available outside of regular office hours to address issues as they arise.

Dont Meet Every Requirement

If youre excited about working with Metrolinx but your past experience doesnt quite align with every qualification of this posting we encourage you to apply. You just might be the right candidate for this or other roles. We are always looking for great talent to join our team.

We invite all interested individuals to apply and encourage applications from members of equity-deserving communities including those who identify as Indigenous Black racialized women people with disabilities and people with diverse gender identities expressions and sexual orientations.

Accommodation:
We value the unique skills and experiences each person brings to Metrolinx and are committed to creating and maintaining an inclusive and accessible environment. We are committed to the requirements of the Accessibility for Ontarians with Disabilities Act and other applicable legislation so if you require accommodation during the hiring process please let our Recruitment team know by contacting us at: or email

Application Process:

All applicants must be legally entitled to work in Canada. Metrolinx will be using email to communicate with you for all job competitions. It is your responsibility to include an updated email address that is checked daily and accepts emails from unknown users. As we send time-sensitive correspondence we recommend that you check your email regularly. If no response is received we will assume you are no longer interested in pursuing the opportunity. Please be advised that a Criminal Record Check may be required of the successful candidate.

For Internal applicants with the recent implementation of the Internal Mobility Policy the internal recruitment process has changed for non-union roles. Candidates must be in their current role for 12 months prior to applying for another role and each applicant must be in good standing (not participating in a Performance Improvement Plan). Please review all provisions of the policybefore submitting your application.

Should it be determined that any background information provided is misleading inaccurate or incorrect Metrolinx reserves the right to discontinue with the consideration of your application.

We thank all applicants for their interest however only those selected for further consideration will be contacted.

WE ARE AN EQUITABLE AND INCLUSIVE EMPLOYER.

#LI-MM3

Required Experience:

DescriptionMetrolinx is connecting communities across the Greater Golden Horseshoe. Metrolinx operates GO Transit and UP Express as well as the PRESTO fare payment system. We are also building new and improved rapid transit including GO Expansion Light Rail Transit routes and major expansions to Tor...