Intermediate IT Security Analyst

We acknowledge with respect that BC Transit delivers our mission on the ancestral territories of Indigenous Peoples across British Columbia, and their historical relationships with the land continue to this day.

In Victoria, where our Corporate Office is located, our people are privileged to live and work on the unceded traditional territories of the Lək̓ʷəŋən peoples, and the Esquimalt and Songhees Nations.

Location: Victoria, BC

Employment Type: Full-Time Regular

Number of in-office/on-site days: At least 2 days per month

Union: MoveUP

Monthly Salary Range: _TMA, MIN $7,587.00 - MAX $9,110.00 is available through annual general wage/step increases.

Recruitment Range: MIN $7,587.00 – STEP 3 $ 8,429.

Placement in the salary range is determined by an assessment of knowledge, skills, experience and ability of the candidate to meet the key requirements of the job. In exceptional cases, candidates may be hired above the recruitment range, provided agreement is reached with the Union.

Closing Date (MM/DD/YYYY): 06/14/2026

Are we right for you...

Do you enjoy working at the intersection of threat detection, incident response, and hands-on technical problem solving? Are you someone who thrives in a fast-paced environment - one day analyzing logs and anomalies, the next responding to incidents or strengthening security controls?

If you’re motivated by protecting critical infrastructure and want to further develop your cybersecurity expertise in a dynamic environment, this could be the next step in your career.

What you'll be doing...

Reporting to the Manager, IT Security and Compliance, this role is part of BC Transit’s Security Operations function, supporting the organization's enterprise cybersecurity program.

In this role, you will:

• Monitor, detect, investigate, and respond to cybersecurity threats across BC Transit’s networks, systems, and applications
• Analyse security events and investigate incidents of moderate complexity, working independently and collaboratively
• Work with modern security platforms including Microsoft Defender XDR, Microsoft Sentinel, Entra , and other enterprise security tools
• Support onboarding, configuration, and optimisation of security technologies to improve detection and response capabilities
• Identify vulnerabilities, recommend mitigation strategies, and support patching and system hardening efforts
• Collaborate with internal IT teams and external partners (including SOC providers) to ensure effective incident response
• Contribute to improving processes, detection logic, and overall security operations maturity
• Support alignment with cybersecurity frameworks and internal policies (e.g., NIST CSF)
• Help improve operational effectiveness by contributing to reduced detection and response times

This intermediate-level role is suited for professionals who have a solid foundation in cybersecurity and are ready to take on more independent investigation and response responsibilities.

What you will not be doing

• This is not a purely monitoring-only role - you will actively contribute to improving tools, processes, and security posture
• This is not a purely strategic or policy-focused role - it requires hands-on technical involvement

What you might love about this role

• Hands-on security work: Investigate incidents, analyze logs, and strengthen defenses daily
• Real impact: Protect critical public transportation infrastructure
• Modern security stack: Gain experience with advanced tools including Microsoft XDR and Sentinel
• Breadth of exposure: Work across network, endpoint, identity, and cloud security domains
• Continuous learning: Opportunities to grow your skills and certifications
• Collaborative environment: Work closely with IT teams, SOC partners, and business stakeholders

What might not resonate

• Operational focus: Includes alert monitoring, incident response, and working through active security queues
• Dynamic environment: Requires the ability to adapt to evolving threats and priorities

This role might not be for you if you…

• Prefer purely strategic or advisory work without hands-on responsibilities
• Prefer narrowly defined responsibilities rather than a broad technical scope
• Prefer highly predictable, low-variability work…