Analyst, Cybersecurity - SOC

Job Summary

The Cybersecurity Analyst - SOC is responsible for establishing the company’s cybersecurity vision to improve security across stores, warehouses, the distribution center, and head office. The Cybersecurity Analyst works closely with the IT infrastructure team as well as the legal team and provides excellent customer service. In addition, this role requires delivering top expertise to ensure the operation, troubleshooting, and optimization of technological resources used at service points.

Key Accountabilities

• Participate in defining Dollarama’s cybersecurity vision and governance;
• Monitor the network and perform intrusion detection analysis using various network defense tools such as intrusion detection/prevention systems, firewalls, and host-based security systems;
• Detect threats based on logs and endpoints to identify and protect against threats from multiple sources;
• Correlate activity between assets (endpoints, network, applications) and environments (on-premises, cloud) to identify abnormal activity patterns;
• Review alerts and sensor data and document formal technical incident reports;
• Work with filtering and threat-hunting teams;
• Use Security Information and Event Management (SIEM) to manage/tune the system, create/manage detection content, and actively monitor alerts;
• Correlate network, cloud, and endpoint activity across environments to identify attacks and unauthorized use;
• Provide user assistance during incidents, including mitigation measures to contain activity and facilitate forensic analysis if needed;
• Perform security tests on computers before deployment to ensure safety;
• Provide Level II support and, when necessary, investigate security incidents to ensure complete resolution;
• Stay informed about emerging threats and vulnerabilities and remain active in security communities;
• Participate in documenting security elements following the implementation of new projects or security software;
• Develop and maintain standards, guides, and rules regarding the technological security of company systems and infrastructure;
• Act as administrator for installing, configuring, and maintaining security tools and applications;
• Advise development teams on secure application programming standards;
• Select modules for the “cybersecurity awareness” program for Dollarama employees;
• Analyze security logs from various IT systems such as servers (AD, Exchange, etc.), firewalls, Anti-Spam, EDR, IDS/IPS, etc.

Job Requirements

• Degree or Diploma in IT or IT security/Cybersecurity;
• Two (2) to five (5) years of IT experience in a similar role;
• Strong knowledge of Microsoft products (Windows 7, Windows 10, Office Suite 2007, 2010, and 2016);
• Good knowledge of Active Directory, AD security, and Office 365;
• Good knowledge of security tools (Firewall, Anti-Spam, IDS/IPS, EDR);
• Strong ability to analyze logs from various operating systems such as Windows, Linux, Unix, and security tools;
• Excellent problem-solving skills;
• Collaborative, autonomous, professional approach, and customer-service oriented;
• Demonstrates reliability, rigor, and flexibility;
• CISSP certification is an asset; and
• Ability to participate in a weekly rotating on-call schedule.