Canadian Citizen Only Cyber Security jobs

The Mint is hiring a Senior Analyst, Cyber Security who can thrive in a dynamic and inclusive environment.

Reporting to the Senior Manager, Information Security, the Senior Analyst, Cyber Security is responsible for safeguarding the Mint’s infrastructure, applications, and cloud services through effective monitoring, detection, and response practices. As a senior technical authority, this role translates security strategies and policies into operational processes and ensures secure implementation across on-premises, hybrid, and cloud environments. This position supports daily SOC operations, advances detection and investigation capabilities, conducts technical security reviews, establishes security configuration baselines, and contributes to secure solution delivery – all while maintaining alignment with organizational security goals, policies and standards.

• Acts as the senior technical escalation point for the SOC, providing guidance and support during complex or high-severity security incidents.
• Supports the operational implementation and monitoring of security controls across on-premises, hybrid, and cloud environments in alignment with established security architectures and baselines.
• Participates in projects to ensure business applications, systems, and services are implemented securely.
• Conducts technical security reviews and establishes security configuration baselines for new or updated systems and devices.
• Implements security monitoring, detection, and response technologies, including cloud-native security tools, and provides recommendations focused on operational effectiveness and efficiency.
• Develops and maintains SOC-specific procedures, runbooks, and documentation that support consistent monitoring, investigation, and response activities.
• Performs advanced incident investigations, threat hunting, and technical analysis across enterprise and cloud environments.
• Identifies gaps in visibility, detection coverage, and response processes, and drives enhancements to SOC tooling, analytics, and workflows.
• Provides technical mentorship and day-to-day support to Cyber Security Analysts, serving as their primary escalation and quality assurance point.
• Responds to critical security incidents, providing on call coverage outside regular business hours, including evenings and weekends, as required.

This position offers a hybrid work arrangement, requiring on-site presence at our Ottawa location three to five days per week, depending on meeting requirements and other activities.

This selection process may also qualify you for other positions with similar requirements and qualifications.

Languages Requirements:

Proficiency in both official languages (English / French) is required at the time of hire. If no qualified candidate fully meets the required levels, other candidate language profiles may be considered in accordance with the Mint’s Staffing Policy. The linguistic profile for this position is:

• Reading Comprehension: B Intermediate
• Written Expression: B Intermediate
• Oral Proficiency: B Intermediate

Education & Designation:

• University degree in related area. Cybersecurity, Information Technology, Computer Science or equivalent experience

Experience:

• Minimum of 7 years of related business experience, with cybersecurity operations experience, preferably in a SOC of incident response function
• Experience operating and maintaining security technologies to protect modern enterprise and cloud environments, including APIs, microservices, containerized workloads, virtualization, databases, and hybrid cloud platforms.
• Proven experience in incident response and threat management, including security investigations, root‑cause analysis, and coordination of remediation across enterprise and cloud environments.

Additional Qualifications:

• Enterprise Security Operations: Extensive hands-on experience implementing, operating and maintaining security technologies, including SIEM/SOAR (e.g., Microsoft Sentinel with KQL), EDR/XDR platforms (Microsoft Defender), IDS/IPS, vulnerability management, identity and access management, network security controls, and e-mail/web security solution.
• Infrastructure & Application Security: Strong understanding of modern enterprise and cloud architectures, including APIs, microservices, containerized workloads, virtualization, relational databases, and hybrid cloud environments.
• Incident Response & Threat Management: Proven experience leading security investigations, performing root-cause analysis, managing threats, and coordinating remediation activities across enterprise and cloud environments.
• Compliance & Frameworks: Working knowledge of relevant regulatory and security standards such as ITSG-33, GC Cyber Controls, PCI, and privacy legislation.
• Ability to take initiative and respond with appropriate urgency
• Strong analytical capabilities paired with a result‑driven approach to problem resolution
• Ability to clearly and concisely document and explain technical concepts to diverse audiences
• Proven capability to balance strategic thinking with hands‑on execution