Information Security Analyst

A global financial services organization is seeking an Information Security Analyst to join its Cybersecurity team. This role is focused on security operations, threat detection, incident response, and continuous monitoring in a large-scale, highly technical environment.

Montreal, QC

A global financial services organization is seeking an Information Security Analyst to join its Cybersecurity team. This role is focused on security operations, threat detection, incident response, and continuous monitoring in a large-scale, highly technical environment.

• Monitor security alerts, dashboards, tickets, reports, and real-time communication channels for potential security incidents.
• Perform initial triage and analysis of security events, identify false positives, and determine incident severity and priority.
• Escalate confirmed security incidents and assist with containment and mitigation activities.
• Partner with internal stakeholders and third-party security providers to investigate and respond to alerts and incidents.
• Monitor and analyze SIEM platforms to identify threats and security issues requiring remediation.
• Develop and tune SIEM detection rules and alerting policies.
• Investigate potential intrusion attempts, suspicious activity, malware events, and other cybersecurity threats.
• Accurately document investigations, findings, and response actions within a ticketing system.
• Contribute to the ongoing improvement of security monitoring and incident response capabilities.

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• 3+ years of experience in a Security Operations Center (SOC), threat detection, or incident response environment.
• Experience investigating security events and performing incident triage in a mid-to-large enterprise environment.
• Hands-on experience with technologies such as:
  • SIEM platforms
  • IDS/IPS solutions
  • Network and host-based firewalls
  • Data Loss Prevention (DLP) tools
• Understanding of common attack techniques including network scanning, DDoS attacks, malware activity, and unauthorized access attempts.
• Experience with scripting or automation using Python, Bash, or Power Shell.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Strong understanding of networking concepts including IP, DNS, HTTP, routers, and switches.
• Curiosity and passion for investigating the root cause of security incidents.
• Participation in a rotating on-call and weekend support schedule is required.

• Experience with malware analysis, phishing investigations, cloud security, threat hunting, or deception technologies.
• Exposure to detection engineering and SIEM rule development.
• Experience working in a 24x7 security operations environment.

• Competitive base salary and bonus opportunity
• Generous paid time off
• Health and wellness reimbursement programs
• Professional development and training opportunities
• Collaborative, technology-driven work environment
• Team events and employee perk programs