- Company Name
- Farm Boy Inc.
- Job Title
- IT Security Analyst
- Job Description
-
Job title: IT Security Analyst
Role Summary: Monitor, analyze, and respond to security threats across the organization’s IT infrastructure. Drive vulnerability management, incident response, and security policy enforcement to protect network, systems, and data.
Expectations: Deliver timely detection and remediation of security incidents, maintain high service quality for employees, customers, and suppliers, and adhere to industry standards (NIST, PCI‑DSS, CIS).
Key Responsibilities:
- Proactively monitor network traffic, systems, and security logs for suspicious activity.
- Investigate alerts using SIEM, EDR, IDS/IPS, and endpoint tools; write SIEM queries and workflows.
- Conduct penetration tests, vulnerability assessments, exploit validation, and proof‑of‑concept testing on applications, networks, APIs, and cloud environments.
- Run red‑team/blue‑team exercises and incident response simulations.
- Develop and maintain detailed security assessment reports with findings, risk analysis, and remediation recommendations.
- Assist in creating and enforcing security policies, procedures, and controls.
- Stay current on emerging attack techniques and security research.
- Perform incident response investigations, document findings, and provide root‑cause analysis.
- Generate regular incident, threat trend, and security effectiveness reports.
- Offer technical guidance on security best practices to IT teams.
- Implement and manage security tools, ensuring compliance with relevant frameworks.
- Respond to high‑priority or emergency security events after hours; participate in on‑call rotations.
Required Skills:
- Strong understanding of network and system security principles.
- Proficiency with SIEM, EDR, IDS/IPS, firewalls, and email security gateways.
- Experience with penetration testing tools and methodologies.
- Knowledge of OWASP Top 10, MITRE ATT&CK, and common exploitation techniques.
- Excellent reporting, technical and non‑technical communication, analytical, and problem‑solving skills.
- Attention to detail, ability to work under pressure, strong time‑management, and interpersonal skills.
- Familiarity with complex retail technology environments is an asset.
Required Education & Certifications:
- Post‑secondary education (Bachelor’s) in Computer Science, Information Security, or related field.
- Minimum 3 years’ experience in Cyber Security Operations or equivalent education/experience.
- Completion of a criminal background check and willingness to pass on‑call duties.