Job Description

If you are committed to public service, enjoy collaborating with others, share our values and have a desire to learn and grow, join The City of Calgary. City employees deliver the services, run the programs and operate the facilities which make a difference in our community. We support work-life balance, promote physical and psychological safety, and offer competitive wages, pensions, and benefits. Together we make Calgary a great place to make a living, a great place to make a life.

The City is committed to fostering a respectful, inclusive and equitable workplace which is representative of the community we serve. We welcome those who have demonstrated a commitment to upholding the values of equity, diversity, inclusion, anti-racism and reconciliation. Applications are encouraged from members of groups that are historically disadvantaged and underrepresented. Accommodations are available during the hiring process, upon request.


As a Cyber Security Operations Advisor, you will play a key role in advancing the City's Cyber Detection Engineering capabilities to strengthen our ability to detect, analyze, and mitigate evolving cyber threats. In this role, you will participate in the design and refinement of high-fidelity detection logic, develop integrations and automations to enhance security workflows, and generate data-driven threat insights, while participating in the Security Operations team's triage and incident response functions. Primary duties include:

Design, implement, and optimize high-fidelity detection logic and data-driven threat insights, ensuring alignment with frameworks like MITRE ATT&CK and maintaining scalable, auditable detection-as-code practices. Develop and maintain integrations and automations across security platforms to improve efficiency, strengthen detection workflows, and enable faster, more consistent security operations. Provide mentorship to junior team members, especially in threat analysis, and data interpretation. Participate in event triage and incident analysis to validate alerts, correlate threat indicators, and assess potential business impact, which includes a weekly after-hours on-call rotation.

Qualifications

A completed 2-year diploma in a relevant field such as Cybersecurity, Information Technology, Computer Science, Engineering, or Mathematics and at least 5 years of progressively responsible Cybersecurity experience, OR A relevant degree and at least 3 years of Cybersecurity or related experience. A graduate degree (e.g., Masters in Cybersecurity, Information Systems, or related fields) is preferred. Proficiency in detection engineering and applied data analytics is required. Expertise with security platforms such as SIEM, endpoint detection, and cloud-native environments. Threat modeling and frameworks knowledge such as MITRE ATT&CK, and NIST CSF. Scripting, automation, and integrations using common languages, APIs, and log/data engineering techniques (parsing, normalization, enrichment). Recognized cybersecurity certifications (e.g., GMON, GCDA, GCIA, or MITRE ATT&CK Defender) will be considered an asset. Experience in municipal or public-sector security environments will be an asset. Familiarity with threat feeds, and intel enrichment APIs will also be an asset. Strong communication, analytical thinking, and collaboration skills.

Pre-employment Requirements

A security clearance will be conducted. Interview candidates will be required to bring a sample Detection Engineering Case Study. Successful applicants must provide proof of qualifications.


Union: CUPE Local 38
Business Unit: Corporate Security

Position Type: 1 Permanent
Location: 133 6 Avenue SE

Compensation: Pay Grade 13 $49.32 - 66.00 per hour
Days of Work: This position works a 5 day
work week with 1 day off in a 3 week cycle.

Hours of work: Standard 35 hour work week

Audience: Internal/External
Apply By: October 6, 2025

Job ID #: 312618