Position Types: Cyber Security Analyst Position Locations: Canada montreal City: Montreal - Canada Experience: 2-5 Years *Please note that the working hours for this role are from 3pm to 11pm or from 4pm to 12am. *The candidates must be located in Montreal area.

Who We Are We enable our clients to provide amazing gameplay experiences to gamers all over the world, through our best-in-class creative and technical services.

Our services include Game Art, Level Design, Engineering, Quality Assurance, Localization, LQA, and Player Engagement.

Our studio footprint spans USA, Canada, Latin America, United Kingdom, Portugal, Romania, and India.

Our 2,000+ professionals have proudly partnered with the worlds leading studios on over 12,000 game titles during the last 17 years.

For more information visit Purpose The Cyber Security Analyst will play a critical role in protecting Clients IT and OT (Operational Technology) environments from evolving threats.

This position requires an experienced and solution-oriented professional who can not only identify risks but also design and recommend practical security measures aligned with business objectives.

You will work collaboratively across IT, digital engineering, and operations to strengthen our cybersecurity posture, implement best practices, and respond to incidents effectively.

Responsibilities Threat Detection & Incident Response Monitor, analyze, and respond to security events using SIEM tools.

Lead investigations into incidents, ensuring timely containment, eradication, and recovery.

Perform root cause analysis and implement corrective and preventive actions.

Develop and maintain playbooks for incident response and escalation.

Vulnerability & Risk Management Conduct regular vulnerability assessments and coordinate patch management activities.

Evaluate emerging threats, assess business impact, and propose mitigation strategies.

Support risk assessments and audits, ensuring compliance with internal and external standards (e.g., ISO 27001, NIST, CIS).

Security Solutions & Architecture Provide expert guidance on security design, architecture, and control implementation.

Recommend and evaluate tools and technologies for endpoint, network, and cloud protection.

Work closely with infrastructure and application teams to ensure security is built into all projects.

Governance, Compliance & Awareness Maintain and enhance security policies, standards, and procedures.

Support cybersecurity awareness and training initiatives across the organization.

Collaborate with internal audit and compliance teams to ensure regulatory adherence.

Operational Technology (OT) & Industrial Security Partner with engineering and operations to secure OT environments, including SCADA and ICS systems.

Develop and implement strategies for protecting connected assets and equipment telemetry.

Qualifications & Skills: Bachelors degree in Computer Science, Information Security, or related field. 2 to 5 years of experience in cybersecurity, preferably in industrial or enterprise environments.

Strong knowledge of:SIEM tools (e.g., Splunk, Sentinel, QRadar)Endpoint detection and response (EDR)Network and cloud security (Azure, AWS)Incident response and threat intelligence OT/ICS security principles (a strong plus) Relevant certifications preferred (CISSP,



CISM, CEH, CompTIA Security+, GIAC).

Excellent analytical, communication, and problem-solving skills.

Proven ability to advise leadership and translate technical security insights into business solutions.

Ideal Candidate Profile An experienced cybersecurity professional who will play a critical role in protecting Clients IT and OT (Operational Technology) environments from evolving threats.

They will also have the ability to move beyond detection and reporting someone who can design and recommend solutions, anticipate risks, and work cross-functionally to enhance the organizations overall resilience.

What We Offer Global

Step is proud to be an equal opportunity workplace and is an affirmative action employer.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. *Please note that the candidate is required to have a good level of English for this position, given that the data provided by the client is essentially in this language.

Since our client and other collaborators are based outside Quebec, English is also the main language of communication with them.

Qui sommes-nous: Nous permettons nos clients doffrir des expriences de jeu extraordinaires aux joueurs du monde entier, grce nos services cratifs et techniques de premier ordre.

Nos services comprennent lart du jeu, la conception de niveaux, lingnierie, lassurance qualit, la localisation, lAQL et lengagement des joueurs.

Nos studios couvrent les tats-Unis, le Canada, lAmrique latine, le Royaume-Uni, le Portugal, la Roumanie et lInde.

Nos plus de 2 000 professionnels ont firement collabor avec les plus grands studios du monde sur plus de 12 000 titres de jeux au cours des 17 dernires annes.

Pour plus dinformations, visitez le site Objet: Lanalyste en cyberscurit jouera un rle cl dans la protection des environnements TI et TO (technologies oprationnelles) du Client contre des menaces en constante volution.

Ce poste requiert un professionnel expriment, orient solutions, capable non seulement didentifier les risques, mais aussi de concevoir et de recommander des mesures de scurit concrtes, alignes sur les objectifs daffaires.

Vous travaillerez en troite collaboration avec les quipes des technologies de linformation, de lingnierie numrique et des oprations afin de renforcer la posture de cyberscurit, dimplanter les meilleures pratiques et dassurer une rponse efficace aux incidents.

Responsabilits: Dtection des menaces et rponse aux incidents Surveiller, analyser et traiter les vnements de scurit laide doutils SIEM.

Diriger les enqutes lies aux incidents de scurit en assurant un confinement, une radication et une reprise rapides et efficaces.

Effectuer des analyses des causes profondes et mettre en uvre des mesures correctives et prventives. laborer,



maintenir et amliorer des guides oprationnels (playbooks) pour la rponse aux incidents et les processus descalade.

Gestion des vulnrabilits et des risques Raliser des valuations de vulnrabilits de faon rgulire et coordonner les activits de gestion des correctifs.

Analyser les menaces mergentes, valuer leur impact sur les activits et proposer des stratgies dattnuation adaptes.

Soutenir les valuations de risques et les audits, en assurant la conformit aux normes internes et externes (ex. : ISO 27001, NIST, CIS).

Solutions et architecture de scurit Fournir une expertise en matire de conception, darchitecture de scurit et de mise en place de contrles de scurit.

Recommander, valuer et slectionner des outils et technologies pour la protection des postes de travail, des rseaux et des environnements infonuagiques.

Collaborer troitement avec les quipes dinfrastructure et de dveloppement applicatif afin dintgrer la scurit toutes les initiatives et projets.

Gouvernance, conformit et sensibilisation Maintenir, mettre jour et amliorer les politiques, normes et procdures de cyberscurit.

Contribuer aux programmes de sensibilisation et de formation en cyberscurit lchelle de lorganisation.

Travailler en collaboration avec les quipes daudit interne et de conformit afin dassurer le respect des exigences rglementaires.

Technologies oprationnelles (TO) et scurit industrielle Collaborer avec les quipes dingnierie et doprations pour scuriser les environnements TO, incluant les systmes SCADA et ICS.

Dvelopper et dployer des stratgies visant la protection des actifs connects et des donnes de tlmtrie des quipements.

Qualifications et competences: Baccalaurat en informatique, en scurit de linformation ou dans un domaine connexe. 2 de 5 ans dexprience en cyberscurit, idalement dans des environnements industriels ou corporatifs.

Trs bonne connaissance des domaines suivants: Outils SIEM (ex. : Splunk, Microsoft Sentinel, QRadar) Dtection et rponse sur les points de terminaison (EDR) Scurit des rseaux et des environnements infonuagiques (Azure, AWS) Rponse aux incidents et renseignement sur les menaces Principes de scurit des systmes OT/ICS (un atout significant) Certifications pertinentes considres comme un atout (CISSP, CISM, CEH, CompTIA Security+, GIAC).

Excellentes aptitudes analytiques, en communication et en rsolution de problmes.

Capacit dmontre conseiller la direction et traduire des enjeux techniques de scurit en solutions daffaires concrtes.

Ce que nous offrons Global

Step est fier dtre un lieu de travail o lgalit des chances est respecte et est un employeur action positive.

Nous nous engageons garantir lgalit des chances en matire demploi, indpendamment de la race, de la couleur, de lascendance, de la religion, du sexe, de lorigine nationale, de lorientation sexuelle, de lge, de la citoyennet, de ltat civil, du handicap, de lidentit sexuelle ou du statut dancien combattant. * Veuillez noter que le/la candidat.e est requis davoir une bonne maitrise de langlais pour ce poste compte tenu que les donnes fournies par le client sont essentiellement dans cette langue.

Comme nos clients et autres collaborateurs sont bass lextrieur du Qubec, langlais est galement la langue de communication principale avec ceux-ci.

📌 Cyber Security Analyst/Analyste en cybersécurité (Montreal)
🏢 Global Step
📍 Montreal