Information Security Analyst

Introduction:

The Information Security Analyst will be responsible for defining, developing, and implementing Technology Controls / Information Security related policies and programs. They will provide specialized expertise and guidance on assessing risks, identifying gaps, and providing security solutions to protect the organization. This role will involve participating in projects of moderate to high complexity and providing analysis and assessments at the functional, business line, or enterprise level.

Responsibilities:

• Support the development, review, tuning, and maintenance of security detections across SIEM and security monitoring platforms.
• Analyze security events, alerts, and telemetry to identify suspicious activity, detection gaps, and opportunities for improvement.
• Apply detection engineering principles to improve alert fidelity, reduce unnecessary noise, and ensure practical detections for security operations.
• Work with Microsoft Sentinel, Microsoft Defender products, Microsoft Entra ID, and related security tools to support threat detection and investigation use cases.
• Use Splunk to review security data, support investigations, and assist with detection tuning.
• Apply cybersecurity knowledge across identity, endpoint, cloud, network, email, and application security domains.
• Collaborate with SOC, incident response, security engineering, and technology teams to understand monitoring needs and improve security outcomes.
• Document detection logic, assumptions, data sources, tuning decisions, and investigation guidance in a clear and maintainable way.
• Support ongoing assessment of detection effectiveness, including relevance, actionability, coverage, and operational value.

Requirements:

Required Skills:

• Bachelor''s degree preferred
• Information security certification/accreditation an asset
• 5-7 years of relevant experience

Preferred Skills:

• Experience with KQL, SPL, or other security query languages
• Experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud, or Defender for Cloud Apps
• Experience with endpoint detection and response tools such as Sentinel One or similar EDR platforms
• Familiarity with MITRE ATT&CK, threat intelligence, attack paths, or adversary behavior analysis
• Exposure to detection lifecycle management, detection-as-code, automation, SOAR, or version-controlled security content
• Scripting or automation experience using Python, PowerShell, or similar technologies
• Experience working in a regulated, financial services, or large enterprise environment