What You’ll Do
Monitor, detect, and respond to security incidents across networks, systems, and applications.
Perform vulnerability assessments and coordinate remediation activities.
Conduct security risk analysis and recommend mitigation strategies.
Investigate security breaches and perform root cause analysis.
Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.
Conduct periodic security audits and compliance checks.
Implement and enforce security policies, standards, and procedures.
Support incident response activities and participate in security drills.
Work closely with IT, DevOps, and development teams to strengthen system security.
Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Experience

What You Should Know:
2 to 5 years of experience in cybersecurity, information security, or network security roles.

Security Monitoring &
Tools
Hands-on experience with SIEM tools (Splunk, QRadar, or similar).
Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).
Knowledge of log analysis and threat detection.

Vulnerability Management
Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).




Understanding of CVSS scoring and risk prioritization.

Network &
System Security
Solid understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs.
Knowledge of Windows/Linux system security hardening.

Cloud Security (Preferred)
Experience securing AWS, Azure, or GCP settings.
Knowledge of IAM policies, cloud monitoring, and data encryption.

Compliance &
Standards
Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).
Experience supporting security audits.

Incident Response
Understanding of incident handling lifecycle.
Ability to perform basic digital forensics and log investigation.

Scripting &
Automation (Preferred)
Basic knowledge of Python, Bash, or PowerShell for automation.

Soft Skills
Solid analytical and investigative mindset.
Excellent documentation and reporting skills.
Ability to work under pressure during security incidents.

Nice-to-Have
Certifications such as CEH, CISSP, Security+, CISM.
Experience with penetration testing tools (Metasploit, Burp Suite, Nmap).
Exposure to DevSecOps practices.
Knowledge of Zero Trust architecture.

📌 Cyber Security Analyst Montreal
🏢 koundinyasa Technology Services
📍 Montreal