What You’ll Do

- Monitor, detect, and respond to security incidents across networks, systems, and applications.

- Perform vulnerability assessments and coordinate remediation activities.

- Conduct security risk analysis and recommend mitigation strategies.

- Investigate security breaches and perform root cause analysis.

- Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.

- Conduct periodic security audits and compliance checks.

- Implement and enforce security policies, standards, and procedures.

- Support incident response activities and participate in security drills.

- Work closely with IT, DevOps, and development teams to strengthen system security.

- Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Experience

What You Should Know:

- 2 to 5 years of experience in cybersecurity, information security, or network security roles.

Security Monitoring &

- Tools

- Hands-on experience with SIEM tools (Splunk, QRadar, or similar).

- Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).

- Knowledge of log analysis and threat detection.

Vulnerability Management

- Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).





- Understanding of CVSS scoring and risk prioritization.

Network &

- System Security

- Solid understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs.

- Knowledge of Windows/Linux system security hardening.

Cloud Security (Preferred)

- Experience securing AWS, Azure, or GCP environments.

- Knowledge of IAM policies, cloud monitoring, and data encryption.

Compliance &

- Standards

- Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).

- Experience supporting security audits.

Incident Response

- Understanding of incident handling lifecycle.

- Ability to perform basic digital forensics and log investigation.

Scripting &

- Automation (Preferred)

- Basic knowledge of Python, Bash, or PowerShell for automation.

Soft Skills

- Strong analytical and investigative mindset.

- Excellent documentation and reporting skills.

- Ability to work under pressure during security incidents.

Nice-to-Have

- Certifications such as CEH, CISSP, Security+, CISM.

- Experience with penetration testing tools (Metasploit, Burp Suite, Nmap).

- Exposure to DevSecOps practices.

- Knowledge of Zero Trust architecture.

📌 Cyber Security Analyst (Montreal)
🏢 koundinyasa Technology Services
📍 Montreal