Information Security Analyst Full-time

Information Security Analyst

Location – This role is hybrid with a mix of remote and in-person. Work primarily takes place at North Campus, Edmonton.

The Office of the Chief Information Security Officer (CISO), part of Information Services and Technology (IST), leads information security for the University of Alberta. The team develops security policies and procedures, identifies and mitigates cybersecurity risks, monitors network infrastructure, responds to security incidents, and delivers training and awareness programs that help staff and students stay safe online. As a member of the Office of the CISO, you'll be on the front line defending the University's data, research, and systems against real-world threats.

Reporting to the Manager, Information Security, the Information Security Analyst is responsible for the operation, investigation, and enforcement of IT and information security systems and policy for the University. You will work with a wide range of technologies, including next-generation firewalls, anti-malware systems, remote access, privileged access management, network security monitoring, deception technologies, incident response, and vulnerability management tools, to protect the confidentiality, integrity, and availability of University data and technical resources and to enable secure research. You'll also be a trusted voice for cybersecurity across campus: delivering presentations, sharing security expertise with faculties, departments, and units, and contributing to campus-wide security initiatives.

If you enjoy solving real security problems, explaining complex ideas to a wide range of audiences, and growing in an energetic, professional team, we'd love to hear from you.

Responsibilities

Manages security controls across the network, identity, and endpoint, including next-generation firewalls, remote access, privileged access management, endpoint privilege management, and email security.

Identifies, prioritizes, and reports vulnerabilities across University and third-party systems, applications, and cloud services, and works with system owners on risk-based remediation.

Detects, investigates, and responds to security incidents and account compromises using network security monitoring, deception technologies, and threat intelligence, while maintaining forensic integrity and chain of custody.

Maintains endpoint protection and anti-malware technologies, triages alerts, and analyzes suspicious files and phishing through sandboxing and external analysis services.

Delivers cybersecurity training and awareness campaigns, and provides expert security guidance to the University community.

Participates in the weekly 24×7 on-call rotation and responds to after-hours security events.

Qualifications

Minimum Qualifications

Post-secondary education in a related field, or 3 years of experience in a dedicated information security role. An equivalent combination of education and experience will be considered.

Knowledge of Windows, macOS, and Linux operating systems.

Excellent written and verbal communication skills.

Excellent presentation skills, with the ability to communicate complex topics to a wide variety of audiences.

Ability to work independently and within a team environment.

Ability to participate in a 24×7 on-call rotation.

Preferred Qualifications

One or more of the following professional designations: CISSP, CEH, GSEC, CompTIA Security+, Cisco CyberOps, Cisco CCNP Security, or Cisco CCIE Security. Other relevant certifications will be considered.

Knowledge of network protocols (TCP/IP, ICMP, UDP), encryption fundamentals, next-generation firewalls, VPNs, anti-malware techniques, vulnerability management, mobile device management, threat detection and prevention, and security incident response processes.

Knowledge of current and emerging threats and technologies related to information security.

Knowledge of IT Service Management (ITSM) concepts and service management platforms such as FreshService or ServiceNow.