Senior Cyber Security Analyst - Cloud Security
Vancouver (VHO)
Applications have closed
Teck Resources
Teck is Canada's largest diversified mining company and is committed to responsible development. It has major business units focused on copper, metallurgical coal, zinc, gold and energy. Shares are listed on the TSX under the symbols TECK.A and...Reporting to the Security Operations Manager, the Senior Cyber Security Analyst is responsible for deployment and management of security operations tools and platforms with focus on cloud native or third-party cloud security solutions. This role actively works with partners within and beyond the Enterprise Security Team to identify requirements, deploy necessary changes and to provide timely support to system users. The role will also be collaborating with Enterprise Architecture team and Cyber Security Risk Architect to review the infrastructure & microservices network and data architecture and identify vital security detection and visibility controls and requirements. In addition, this role is responsible for building and maintaining operational KPIs (Key Performance Indicators) for the tools within the portfolio. This role maybe given responsibilities in other areas from time to time.
Security Operations Platform: Responsibilities in this position will be to maintain and operate core security platforms for CSPM (Cloud Security Posture Management) and cloud workload security and to ensure availability in accordance with published SLAs (Service Level Agreement) and quality benchmarks.
Projects: The Security Analyst also works on and support delivering new projects, ensuring that the delivery is aligned with stakeholders' requirements, end-to-end processes are defined and detailed, monitoring and meaningful metrics defined and deployed in alignment with Teck’s operational excellence.
Dimensions: The Security Analyst will lead and act as the primary analyst for a group of platforms. This means being decisive, acting independently as well as managing and collaborating on assigned tasks. This will also involve proposals, and execution of action plans for improvements to the operations platforms, to build and maintain “capability” and “value” which aligns with business objectives. The Security Analyst will be required to ensure that documentation is up to date and complete, assist with sprint planning (Agile Project Management) and ensure the tools meet the needs of the users. As such, the analyst must possess expert technical skills and the highly developed communication skills necessary to interact with a wide variety of colleagues at all levels.
Key Accountabilities
- Maintain Security Operations platforms to the defined standards, SLAs, and quality benchmarks
- Propose, plan, and conduct improvements and implement mitigations to improve service quality and SLAs for such platforms
- Participate and lead technical activities for projects and initiatives
Experience Required
- 5+ years working in a security operations/security engineering role with focus on Threat and Vulnerability management
- 2+ years in a lead role in Cyber Security
- Hands-on experience creating technical documentation and diagrams
- Hands-on experience with establishing and maintaining policies and guardrails for cloud resources and workloads
- Hands-on experience with Cloud platforms such as Microsoft Azure, scripting language and cloud security, including but not limited to:
- Tenant Security,
- AKS Security,
- Containers & Mesh Networking Security
- Application Gateway & WAF (Web Application Firewall),
- Security Groups and VNET Segmentations,
- Security Analytics,
- Encryption & Keys Management
- Working experience with agile framework and Azure DevOps and CI/CD pipeline security
- Ability to translate technical challenges and security findings with written and oral reports
- 2+ years’ experience building and maintaining Security KPIs
- Degree/Diploma, preferably with a focus on Information Security
- CCSP, Azure Security Engineer Associate or equivalent certification (required)
About TeckAt Teck, we value diversity. Our teams work collaboratively and respect each person’s unique perspective and contribution.
We wish to thank all applicants for their interest and effort in applying for the position; however, only candidates selected for interviews will be contacted.
Teck is a diversified resource company committed to responsible mining and mineral development with major business units focused on copper, steelmaking coal, zinc and energy. Headquartered in Vancouver, Canada, its shares are listed on the Toronto Stock Exchange under the symbols TECK.A and TECK.B and the New York Stock Exchange under the symbol TECK. The pursuit of sustainability guides Teck’s approach to business. Teck is building partnerships and capacity to confront sustainability challenges within the regions in which it operates and at the global level. In 2018, Teck was named to the Dow Jones Sustainability World Index (DJSI) for the ninth straight year, indicating that Teck’s sustainability practices rank in the top 10 per cent of the world’s 2,500 largest public companies in the S&P Global Broad Market Index.
Learn more about Teck at www.teck.com or follow @TeckResources
Your application to this posting is deemed to be your consent to the collection, use and necessary disclosure of personal information for the purposes of recruitment. Teck respects the privacy of all applicants and the confidentiality of personal information.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Analytics Azure CCSP CI/CD Cloud DevOps Encryption Firewalls KPIs Microservices Monitoring Privacy Scripting SLAs Vulnerability management
Perks/benefits: Career development Team events
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Cyber Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Manager Pentest H/F jobs
- Open Staff Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Product Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cyber Security Specialist jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Senior Information Security Engineer jobs
- Open Security Specialist jobs
- Open Senior Penetration Tester jobs
- Open Security Researcher jobs
- Open Cybersecurity Specialist jobs
- Open Senior Security Architect jobs
- Open Sr. Security Engineer jobs
- Open IT Security Engineer jobs
- Open CISM-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open ISO 27001-related jobs
- Open Pentesting-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open SaaS-related jobs
- Open CISA-related jobs
- Open Analytics-related jobs
- Open Threat intelligence-related jobs
- Open IAM-related jobs
- Open APIs-related jobs
- Open Java-related jobs
- Open Security assessment-related jobs
- Open Malware-related jobs
- Open DevOps-related jobs
- Open Security Clearance-related jobs
- Open IDS-related jobs
- Open EDR-related jobs
- Open Forensics-related jobs
- Open CEH-related jobs
- Open Kubernetes-related jobs