About this role
Hootsuite’s Security team is looking for a Junior Cyber Incident Response Analyst to assist the team in securing our product, services and IT infrastructure. You’ll work to identify and stop attacks when they occur, and support in developing and implementing technologies, controls, and processes to prevent them. This is a hybrid role and is open to applicants located within commuting distance of our Hootsuite office in Vancouver or Toronto. In this role, you will report to the Director, Information Security.
WHAT YOU’LL DO:
• Support the team in the day-to-day security operations monitoring and response for corporate and customer facing systems
• Perform incident analysis and triage, requiring an understanding of network fundamentals, malware analysis, and de-obfuscation techniques
• Assist in analyzing, escalating, and responding to alerts that originate from our MSSP and other security tools such as SIEM, IDS, Anti-Virus, EDR, WAF, and DLP
• Support in corporate-wide Security Incident Response Teams to contain threats as identified
• Support the technical components of the incident response by executing operational runbooks as required
• Participate in Hootsuite’s security incident on-call rotation schedule
• Perform other related duties as assigned
WHAT YOU’LL NEED:
• Degree or Diploma in Information Technology, Computer Science or Engineering, along with information security certifications ; complete or willingness to obtain or equivalent combination of education and experience
• 1 - 2 years of experience in a security analyst, SOC analyst, incident response analyst, security engineer, or system administrator or similar role
• Knowledge of common critical network protocols and layer 7 technologies such as SMTP, HTTP, HTTP/S, SSL/TLS, DNS, FTP, SSH, and others
• Experience working in a cloud (preferably AWS) environment with CI/CD along with extensive familiarity with Unix / Linux based operating systems
• Familiarity with Ansible and Terraform is an asset
• Some experience with programming or scripting, including Bash, Python, YAML, and PowerShell
• Fundamental understanding of Mac OS, Windows, and Linux operating systems
• Applied understanding of the OSI model, basic networking and analytical aptitude
• Thorough understanding of web and mobile application security vulnerabilities, including but not limited to the OWASP Top 10 list of vulnerabilities
• Understanding of various log formats from a variety of network and computer devices
• Hands on experience with security products, including SIEM, next generation AV, Firewall technologies, Amazon Services
• Collaboration and Teamwork: works with others to deliver results, meaningfully contributing to the team and prioritizing group needs over individual needs
• Creativity and Innovation: seeks new and better ways of doing things, generates original and imaginative ideas, products, or solutions
• Customer Focus: demonstrates a desire to proact