Cyber Operations Analyst

Being part of Air Canada is to become part of an iconic Canadian symbol, recently ranked the best Airline in North America. Let your career take flight by joining our diverse and vibrant team at the leading edge of passenger aviation. The Cyber Security Operations Centre Analyst will be working in a fast paced and innovative environment for one of North America’s top airlines.

The Cyber Security Operations Centre Analyst position requires information gathering, analytics aptitude and problem-solving skills. Cyber security threats continue to evolve, and the Cyber Security team will evolve with it. The Cyber Security Operations Centre is the first line of defense to protect Air Canada and our customers. This position reports to the Manager of the Cyber Security Operations Centre.

• Support security monitoring, response, and remediation activities of Air Canada’s technology environment.
• Act as an incident responder and first line of defense, identify and respond to cyber security.
• Support the steady state operations of our enterprise security monitoring and response tools.
• Develop and provide input into standard operating procedures.
• Measure and report on key service-level metrics showcasing the effects of the Cyber Security Operations program.
• Generate security incident reports and dashboards for IT administrators and business managers to evaluate the efficacy of security monitoring and responsive capabilities.
• Perform technical investigations to identify abuse and misuse of systems and processes.
• Work with relevant stakeholders (which may include customers, partners, and internal teams) and collect information while investigating a potential cyber security or fraud threat to Air Canada.
• Review and analyze data from multiple internal and external stakeholders.
• Communicate analysis results and make recommendations to relevant stakeholders.
• Build relationships throughout the organization to enhance and support our focus on safe, secure, and reliable operations.
• Maintain up-to-date understanding of security threats, and countermeasures. Which may include but not limited to monitoring illicit communication channels. Act as the subject matter expert on behalf of the Cyber Security Operations Centre.
• Perform Digital Forensics, Incident Response (DFIR) and threat hunting activities using relevant actor TTP's and IOCs.

• A relevant University degree/technical certification, and/or relevant experience commensurate to the role.
• 2-3+ years of IT technology or operations experience in a large company or in an operational response fraud role.
• Certification in Information Security (Security+, GCIA, OSCP or any other blue team training) is a plus.
• Strong technical background in various operating systems, networks, applications, databases, and cloud.
• Ability to communicate effectively and to work collaboratively with all levels of the organization with superior verbal and written skills.
• Superior customer service and client interfacing skills.
• IT and Cyber background in order to understand basic concepts and technology as part of the fraud such as IP Address, Domains, VPN’s, etc.
• Ability to work effectively under pressure and in rapidly changing environments or uncertain conditions.
• Openness and willingness to adapt to different and new ways of doing things passion for Service Improvement.
• Ability to work cooperatively with others on a team, and to establish and maintain effective business relationships.
• Demonstrate punctuality and dependability to handle multiple tasks, learn quickly, handle a high volume of activity, to support overall team success in fast-paced environment.

• After hours on-call support for escalations.
• Ability to travel and work effectively with remote teams.
• Ava…