Jr. Analyst, Security Operations

Overview

Come Build Your Career at Aecon! As a Canadian leader in infrastructure development, Aecon is safely and sustainably building what matters for future generations to thrive. We lead some of the most impactful infrastructure projects of our generation, at the forefront of transformational change in transportation and energy, and partnering every day to build, connect, power, and strengthen our communities.

• Safety Always. Our number one core value. If we can’t do it safely, we don’t do it at all.
• Integrity. We lead by example, with humility and courage.
• Accountability. We’re passionate about delivering on our commitments.
• Inclusion. We provide equitable opportunities for everyone.

We lead the infrastructure industry with purpose, and our people are at the heart of everything we do. We invest in our people, just like they invest in us!

Reporting to the Sr. Manager, Security Architecture and Operations, the Jr. Security Analyst plays a key role in supporting daily security operations and advancing our information security roadmap. You’ll balance priorities across multiple security functions, contribute strong documentation and analytical skills, and take initiative to identify and address needs.

• Support the day-to-day operations of the information security program.
• Monitor multiple environments to detect, validate and respond to anomalous activity, security events, or unauthorized access of information assets.
• Work to promptly resolve tickets related to information security, such as virus/malware infections on desktop, phishing, suspicious network traffic and vendor account reviews.
• Responsible for conducting vulnerability scans and coordinating all vulnerability remediation from any source (e.g. SAST/DAST scans, network scans, pen tests, etc.).
• Actively seek mitigation or closure in identified security risks and gaps.
• Track security trends/events to provide information on monthly security reporting.
• Utilize problem solving to find root cause in security incidents.
• Work collaboratively with other Information Services teams to reach common resolutions and goals.
• Provide technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, incident management and security tool implementation.
• Conduct security product evaluations, and recommend products, technologies and upgrades to improve Aecon’s security posture.
• Liaise with security product and service vendors to provide day to day support and monitoring of all networks.
• Work with our internal Communications and Learning teams to provide security awareness and training materials for a wide range of audiences, which ranges from senior leaders to field staff.
• Provide management of regular phishing simulations including, but not limited to, selection of templates, launching of campaigns and providing reporting & enforcement of compliance with phishing related policies.
• Monitor, triage and respond to emails that have been reported by employees as suspicious and potential phishing attacks. Provide monthly metrics related to these reported emails.
• Support the operational components of incident management, including detection, response, and reporting.
• Provide 24/7 oversight to security operations as it relates to monitoring and alerting of potential security incidents. Be available at any time to actively manage security incidents once they are confirmed by the Security Operations team.

• A Bachelor’s degree in Information Systems, Information Security or related field.
• 1-2 years’ experience applying information security principles and practices in an enterprise environment, or 1-3 years of experience supporting information technology.
• Knowledge of security technologies and tools such as SIEM, IPS, EDR, MDM, web content filters and email security gateways
• A good understanding of the business impact of security tools, technologies and policies.
• Knowledge of Windows and Linux operating systems, and network protocols.
• Working towards CISSP and/or Security+ certifications would be an asset.
• Experience troubleshooting technical issues, with excellent analytical and…