Job Description

| |Please see Special Instructions for more details.Lethbridge College is committed to inclusive recruitment practices by providing reasonable access and accommodations to applicants. If you would like to request an accommodation at any stage of the recruitment process, please contact . Private information received in relation to the request will only be used to facilitate the recruitment process and will be kept confidential and shared only as needed with the selection committee.Posting DetailsPosition InformationJob Title Security Analyst
Appointment Type Full-time Continuing
Position Dates Full-time Continuing
Hours per week/FTE 35
About the PositionPrimary FocusIf you are passionate about cybersecurity, have hands-on experience with Microsoft Defender and/or Sentinel, and a desire to contribute to an enterprise environment, we invite you to apply to join our close-knit department of IT professionals.Reporting to the Manager of Planning & Infrastructure, the Security Analyst will be responsible for the operational work required to secure our systems and data, led by the cybersecurity strategies set by the Senior Security Analyst.
Position DetailsThis net-new role will be encouraged to reflect the skills and personality of the successful applicant. While some duties are required, the Security Analyst will also have a degree of autonomy and be expected to take initiative without prescriptive direction.Specific Accountabilities

• Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
• Conduct product evaluations using the HECVAT template to assess risk vs. requirements through the lens of the college\'s context (i.e. performance, cost, functionality).
• Champion and ensure security standards are followed for systems relying on cloud-hosted platforms (AWS and Azure).
• Help maintain the enterprise\'s security documents (policies, procedures, guidelines).
• Train ITS staff and college stakeholders on cybersecurity procedures and technologies.
• Help administer the cybersecurity training platform for annual and monthly employee-focused campaigns.
• As part of a team, monitor the security impact of applications installed on user endpoints and follow up to resolve problems.
• Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems, databases, and other data repositories.
• Optimize the firewall and its configurations with the network team to increase secure scores/metrics for reporting purposes.
• Proactively monitor and lead investigations into problematic activity internal to college systems and external threats to users and data, providing ongoing communication to ITS management. This includes the operational remediation of removing phishing emails which sidesteps spam filtering protocols.
• Help manage Active Directory as part of the Identity and Access management system and account lifecycle.
• Respond to incidents in Sentinel and maintain the system with updates and improvements.
• Configure the various security controls, such as email spam and phishing policies, Defender for Endpoint policies, and group & InTune policies where security is the desired outcome.
• Respond to tickets logged in the Help Desk\'s tool and take ownership/responsibility for actioning and following up with users as appropriate, updating and closing tickets in a timely fashion.
• Assist with vendor-assisted projects, such as scoping and conducting penetration tests.
• Assess the security of the college systems and provide written recommendations to mitigate risk.
• Assist in auditing systems for compliance.

Required Qualifications

• Undergraduate degree from an accredited post-secondary institution;combination of relevant career experience may also be considered
• Certifications such as CEH, Security+, SSCP, GISF, GSEC

Preferred Qualifications

• Experience with DNS, Active Directory, Sentinel, Azure, Defender, NGFWs
• Scripting with shell, Powershell, Python
• Knowledge of PHP, Javascript, HTML
• History of working with and/or internal to a SOC
• Applied knowledge of networking principles
• Knowledge of security frameworks such as NIST, ISO 2700, and Mitre Att&Ck

Salary Starting from $74,419 to $87,553 per annum; commensurate with education and experience.
Working HereLethbridge offers a low cost of living, with mild winters, sun-filled summers, and close proximity to the mountains. Enjoy the advantages of small-city life while accessing the amenities of a larger center, including arts and culture, sport, shopping, and year-round family-friendly events.During the initial 6 months, the successful applicant will be expected to be on-site to facilitate knowledge transfer in the role. Hybrid work arrangements may be considered after this time, but candidate will need to be living in or near Lethbridge, due to on-site emergency situations.Posting Detail InformationPosting Number P24-00558
Open Date 05/17/2024
Close Date 06/02/2024
Open Until Filled No
Special Instructions to ApplicantsLethbridge College is committed to inclusive recruitment practices by providing reasonable access and accommodations to applicants. If you would like to request an accommodation at any stage of the recruitment process, please contact . Private information received in relation to the request will only be used to facilitate the recruitment process and will be kept confidential and shared only as needed with the selection committee.Supplemental QuestionsRequired fields are indicated with an asterisk (*). * * Are you a Canadian citizen or permanent resident?

• Yes
• No
• * Do you have hands-on experience with Microsoft Defender, Defender for Endpoints, and/or Sentinel?

• Yes
• No

Documents Needed To ApplyRequired Documents * Cover Letter

• Resume

Optional Documents * Letter of Recommendation

Lethbridge College