This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Information Security Analyst will plan and carry out security measures to protect PointClickCare’s networks, data centers, cloud deployments, endpoints and systems, including Software as a Service environment (Corporate and Product Functions). The Information Security Analyst will contribute to enhancement of security operations, cyber defense, and vuln management through automation, tool evaluation, and use of AI solutions. In addition, the Security Analyst will act as lead on specific projects and technologies, assuring effective implementation and management of security tools to continue to improve the security posture of PointClickCare.
Job Responsibility:
Primary point of contact to facilitate with the daily monitoring, assessing and reporting of security incidents from the SIEM platform
Manage processes relating to the installation, maintenance and operation of security infrastructure including SIEM, anti-virus, DLP, PAM, IAM, etc
Perform ad hoc threat risk assessment (TRA) on infrastructure and systems as well as cloud-based solutions and facilitate remediation tasks with other operational teams
Work independently, and with the team, to determine new methods of automating existing workflows (e.g., through the use of AI tools, automation frameworks, and workflow management solutions)
Assist with ongoing Vulnerability Management program to perform routine vulnerability scans and working closely with SaaS Operations and Corporate Technology teams to coordinate remediation of identified findings
Assist with the evaluation of security tools and processes in conjunction with Director, Security Operations
Recommend improvements to security tools, configurations, processes and policies
Report monthly security KPIs, change requests, incidents and threats/events
Provide advice and apply your experience to help tune alerting to reduce false positives
Actively assist with Security Incident Response process and support security investigations by documenting findings and root causes as and when needed, research and assess new threats and security alerts and determining relevance to company environments and staff
Work closely with key business groups across the organization to develop and maintain a proactive company-wide security presence
Act as a technical lead in security related projects/initiatives such as new security solutions to improve the overall security posture of PointClickCare
Assist with periodic security audits on current PointClickCare infrastructure, and work with appropriate team(s), such as Security, Corporate Technology, SaaS Operations and other departments to remediate any vulnerabilities found
Participate in security investigations and compliance reviews, as requested by the GRC team
Ability to work independently, engage leadership as needed, and be proactive in advancing company security posture
Complete other duties as assigned
Requirements:
Proven experience with security software, such as: SIEM, Vulnerability Scanning, Advance Endpoint Protection (Anti-virus/Anti-Malware), Privilege Access Management, Data Loss
Working technical knowledge of IT technical environments with a strong understanding of IP, TCP/IP, network administration protocols, Access Control methods, WAFs, Firewalls, and virtualized access control solutions (e.g., Network Security Groups)
Understanding/working knowledge of Windows, Active Directory, Group Policy, DNS, and Apple operating systems
Extensive working knowledge of information security and vulnerabilities/threats, security best practices, tools, and techniques, including encryption
Experience working with Python and PowerShell Experience in managing/administering Linux OS variants, PowerShell, bash/shell scripting, python