Cybersecurity Operations Analyst

About the Role

Powerex Corp., the wholly owned energy marketing subsidiary of BC Hydro, is responsible for marketing clean electricity across North America. Cybersecurity is fundamental to maintaining the reliability, integrity, and availability of the systems that support our business.

Our Cybersecurity Operations team protects a complex enterprise environment. We continuously evolve our capabilities to defend against sophisticated cyber threats while enabling the secure adoption of new technologies.

We are seeking an experienced Cybersecurity Operations Analyst to join our growing Security Operations team. This role is ideal for someone who enjoys solving complex security challenges, continuously learning, sharing knowledge, and improving cybersecurity capabilities through collaboration, automation, and innovation. The ideal candidate demonstrates technical ownership, sound judgment, curiosity, and initiative in complex security operations environments.

• Protect critical business systems supporting North America's energy markets.
• Work alongside a highly skilled cybersecurity team tackling sophisticated threats.
• Influence the evolution of enterprise cybersecurity capabilities.
• Access opportunities for technical growth, mentorship, and continuous learning.
• Comprehensive compensation, pension, and benefits package.

• Investigate, analyze, and respond to cyber incidents across the environment.
• Perform security event correlation using multiple data sources to determine business impact, root cause, and appropriate remediation and mitigation measures.
• Perform proactive threat hunting using behavioral analytics, threat intelligence, indicators of compromise (IOCs), and attacker tactics, techniques, and procedures (TTPs) to identify suspicious or malicious activity.
• Analyze malware-related indicators, network traffic, endpoint telemetry, cloud activity, identity events, and system logs to identify malicious behavior and determine attack methods.
• Coordinate response activities with infrastructure, networking, cloud, application, and business teams to contain and remediate security incidents.
• Develop and maintain incident response plans and procedures, playbooks, and operational documentation.

• Play a key role in the delivery of security operations services across monitoring, threat detection, identity protection, vulnerability management, security analytics, and operational reporting.
• Support, administer, and continuously improve the organization's cybersecurity technologies, including SIEM, EDR/XDR, identity and access management, network security, email security, EPM/application control, cloud services, vulnerability management, security monitoring and analytics, and automation/orchestration platforms.
• Develop, tune, and optimize monitoring rules, detection logic, dashboards, alerts, reports, and use cases to improve visibility and detection coverage.
• Review security events, telemetry, and existing controls to identify opportunities to improve detection capabilities and operational efficiency.
• Validate security configuration changes and ensure cybersecurity controls remain effective.
• Provide cybersecurity operations input on selected technology projects, including review of operational requirements, implementation considerations, and transition into production support.
• Provide recommendations that align with security best practices, Zero Trust principles, and defense-in-depth strategies.

• Perform or assist with vulnerability assessments, exposure management, security assessments, and audit activities.
• Assist with remediation activities by providing guidance and prioritization recommendations based on business risk, exploitability, asset criticality, and threat intelligence.
• Monitor external intelligence sources, vendor advisories, CERT notifications, and industry reports to identify emerging threats and vulnerabilities, and assess their impact on the organization.

• 5+ years of hands-on cybersecurity operations, incident response, detection engineering, or equivalent…