Analyst, Systems Security

Summary

The Systems Security Analyst works within a protected Managed Security Operations (MSO). The Systems Security Analyst is one of several Level 2 operations and incident responders who works on rotating shifts to respond to security alerts and notifications throughout the 24x7x365 operations. The Systems Security Analyst also performs hands-on device management configuration changes and troubleshooting for security devices such as firewalls VPN devices host intrusion prevention appliances anti-virus and anti-spam appliances and data loss prevention appliances for a diverse client base. The incumbent must be able to quickly understand the diverse managed security services that the Bell Business Markets offers to its client base and must be able to differentiate and respond to the unique operational and contractual performance requirements of each individual client. The Systems Security Analyst must have a comprehensive knowledge of both technical and operational network security best practices and significant hands-on experience in a wide variety of technology platforms and security services that the Managed Security Operations (MSO) supports. The Systems Security Analyst must be able to identify and compare technological capabilities that are required to support a particular security service and identify technological gaps where more development is needed. A high level of customer interaction is expected of the Systems Security Analyst therefore top-notch communications skill (both verbal and written) is essential.

Key Responsibilities

Monitors reviews and interprets security alerts and notifications and provides initial response analysis and incident management in support of Bell managed customers
Works rotating shifts to cover 24x7x365 operations.
Assesses and establishes mitigation steps to ensure appropriate incident treatment and informs both customer and management as appropriate.
Manages a variety of security devices such as VPN firewall host intrusion prevention systems identify and access programs data loss prevention systems anti-virus and anti-spam systems.
Configures and maintains security devices and appliances as well as provide general knowledge and recommendations for security best practices to clients as required.
Adheres to strict security and authentication protocols associated when dealing with all levels of client requests

Critical Qualifications

Completion of University or College program in Computer Network Systems or 3 years of equivalent industry experience in the information systems field.
Knowledge of security operational policies procedures and techniques.
Knowledge and understanding to interpret SIEM alerts and supporting technologies.
Understanding of mitigation safeguards and responses at the systems network and application level (VPN Firewalls Intrusion Detection server hardening SSO encryption technologies).
Demonstrated experience troubleshooting security solutions including authentication authorization encryption and audit capabilities as part of an overall system design.
Ability to translate complex and ambiguous problems into actionable components and lead less experience analysts through a solution.
Excellent communication presentation and relationship skills especially the ability to articulate advanced technical topics and build consensus among business and technical constituents.
Certifications relating to Palo Alto technologies would be highly desirable.
Must have working knowledge in risk assessment methods as it relates to vulnerability management.
Understanding of PCI ISO 27001 ITIL and/or other compliance frameworks would be an asset
Security designation such as CISSP would be an asset.

Preferred Qualifications

Additional Requirements

This role involves 12-hour rotating shifts including both day and night schedules