Aecon Group Inc. is a Canadian leader in infrastructure development, focusing on sustainable projects that benefit future generations. The Intermediate Analyst, Security Operations will support the execution of the information security roadmap and manage daily IS security operations, requiring strong analytical skills and the ability to identify operational needs.
Support the day-to-day operations of the information security program set out by management
Monitor multiple environments to detect, validate and respond to anomalous activity, security events, or unauthorized access of information assets
Work to promptly resolve tickets related to information security, such as virus/malware infections on desktop, phishing, suspicious network traffic and vendor account reviews
Assist with security vulnerability assessments, identifying and prioritizing findings for resolution
Actively seek mitigation or closure in identified security risks and gaps
Track security trends/events to provide information on monthly security reporting
Attend security industry talks, seminars and events to stay current with latest information security trends
Utilize problem solving to find root cause in security incidents
Work collaboratively with other Information Services teams to reach common resolutions and goals
Provide technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, incident management and security tool implementation
Conduct security product evaluations, and recommend products, technologies and upgrades to improve Aecon’s security posture
Liaise with security product and service vendors to provide day to day support and monitoring of all networks
Work with our internal Communications and Learning teams to provide security awareness and training materials for a wide range of audiences, which ranges from senior leaders to field staff
Provide management of regular phishing simulations including, but not limited to, selection of templates, launching of campaigns and providing reporting & enforcement of compliance with phishing related policies
Monitor, triage and respond to emails that have been reported by employees as suspicious and potential phishing attacks. Provide monthly metrics related to these reported emails
Support the operational components of incident management, including detection, response, and reporting
Provide 24/7 response to security operations as it relates to monitoring and alerting of potential security incidents. Be available at any time to actively investigate / document those alerts and manage confirmed security incidents
Qualification
Required
A bachelor's degree in Information Systems or Information Security
2-3 years’ experience applying information security principles and practices in an enterprise environment, or 3-5 years of experience supporting information technology
Hands on experience of security technologies and tools such as SIEM, IPS, EDR, MDM, web content filters and email security gateways
A strong understanding of the business impact of security tools, technologies and policies
A good understanding of Windows and Linux operating systems, and network protocols
A good understanding of the public cloud (AWS, Azure, etc.)
Strong in analytical thinking, problem solving and troubleshooting
An ability to manage multiple tasks with minimal supervision
Excellent reporting skills, with demonstrated ability to create reports
Excellent verbal, written and interpersonal communication skills with the ability to explain technical matters to a non-technical audience
Flexibility and ability to adjust quickly to changes in priorities, or to different business demands
Must be able to respond to, and action, security alerts on a 24x7 basis
Preferred
Working towards and/or having CISSP and/or Security+ certifications would be an asset
Benefits
Ensure you and your family receive the services needed to support your mental, emotional, and physical well-being.
Believe in helping you build your career through our Aecon University and Leadership Programs.
Are committed to supporting and investing in inclusive work environments, through initiatives like Equity, Diversity & Inclusion training, our Aecon Women in Trades and Aecon Diversity in Trades programs, and our Employee Resource Groups (ERGs) to ensure we are building inclusion into every aspect of our culture at Aecon.
Aecon Group Inc. (TSX: ARE) is a North American construction and infrastructure development company with global experience.
Glassdoor
4.0
Founded in 1877
Toronto, Ontario, CAN
10001+ employees
http://www.aecon.com/
Aecon Group Inc. (TSX: ARE) is a North American construction and infrastructure development company with global experience.
