Security Analyst, M365​/Azure Cloud

Build bold. Deliver impact. Win together. At General Dynamics Mission Systems–Canada, we’re not just engineering technology — we’re shaping the future of defence and security. Our teams design and deliver advanced, mission‑critical solutions that enhance national security, strengthen communities, and protect the people we serve. If you’re looking for meaningful work that contributes to a safer, more secure world, you’ll find purpose here.

Every day, your skills will directly impact programs that matter.

We are seeking a Microsoft 365 / Azure Cloud Security Analyst to join our Information Technology team.

The ideal candidate will have strong background in cloud security, particularly within the M365 and Azure ecosystem, and be proficient in deploying, configuring, securing, and monitoring enterprise cloud services and ensuring compliance with corporate and industry regulatory frameworks.

You will work vendors, teammates, cyber security, and leadership across IT to continually improve information technology infrastructure as well as drive the adoption of the latest technologies. You will be responsible for developing security best practices and providing mentoring and training to others both within and outside the IT team.

• Design, implement, and maintain security controls across Microsoft 365 and Azure environments
• Harden Microsoft 365 services including Exchange Online, SharePoint Online, Teams, and One Drive
• Configure and secure Azure Active Directory (Entra ), including identity protection, conditional access, and privileged identity management
• Monitor, detect, and respond to security incidents using tools such as Microsoft Sentinel and Defender suite
• Implement and manage data protection and compliance solutions using Microsoft Purview (e.g., DLP, Information Protection, Insider Risk)
• Ensure Azure tenant configurations align with security best practices and organizational policies
• Conduct security assessments, gap analyses, and remediation planning
• Support regulatory compliance initiatives (e.g., NIST, ISO 27001 or similar frameworks)
• Develop and maintain security documentation, policies, and standard operating procedures
• Collaborate with cyber and security teams to align cloud security posture with business and regulatory requirements
• Participate in audits and provide evidence for compliance assessments
• Stay current with evolving Microsoft security capabilities and threat landscape

• Degree or diploma in information technology / systems, engineering, or a related discipline
• 3–5 years of experience in cloud security, with a focus on Microsoft 365 and Azure
• Hands‑on experience with:
  • Microsoft Purview (DLP, data classification, records management)
  • Microsoft Sentinel (SIEM/SOAR use cases, analytics rules, incident response)
  • Microsoft Defender suite (Defender for Office 365, Endpoint, Cloud Apps, etc.)
• Strong understanding of Azure AD (Entra ), including:
  • Conditional Access, MFA and identity protection, Role‑based access control (RBAC)
• Experience with secure configuration and hardening of M365 services
• Familiarity with compliance and regulatory standards (e.g., NIST, ISO 27001, CIS benchmarks)
• Detail oriented, with strong analytical and problem‑solving skills
• Strong communication skills with the ability to translate technical risks into business terms
• Ability to work independently and in cross‑functional teams
• An enthusiasm to contribute and take ownership of work in your space
• You won’t be afraid to ask “why are we doing things this way?” and “how can we make it better?”

• Experience working in regulated environments (defence, government, finance, or similar)
• Knowledge of Zero Trust security principles
• Microsoft certifications (e.g., SC-200, SC-300, AZ-500, MS-500)
• Experience with scripting/automation (Power Shell, Azure CLI)
• Exposure to hybrid identity environments (on‑prem AD + Azure AD)
• Experience working with or familiarity with AI/ML models is preferred.

• Experience with secure cloud architecture design
• Familiarity with securing cloud environments to handle controlled data such as Canada Controlled Goods…