Security Analyst

Grounded in safety, quality, and ethics, our experts lead their fields and guide our work with rigor, a creative spirit, and vision for growth. We draw from more than 20 technical specialties around the globe and are committed to fostering an inclusive community of diverse talents, backgrounds, and expertise. We’re a place to apply your passion and collaborate with top environmental talents on work that’s critical to our clients and the communities they support. Join a team that has the environment down to a science.

Your Opportunity

Stantec is looking for an independent self-starter to support their Government Services business unit. The Security Analyst will assist with cybersecurity, compliance, audits, forensics, and monitoring. The analyst will be involved with larger IT projects having security and compliance related impacts. The analyst will work closely with Stantec's third-party Security Operations Center to monitor intrusions and vulnerabilities while coordinating with other members of the IT team on investigation, containment, and remediation of incidents. The ideal candidate brings experience in identifying network and endpoint intrusions with industry leading security technologies. The analyst will also review and provide guidance to the IT team around security best practices, compliance with Stantec's regulatory and contractual frameworks, and act as an advocate for company policies.

Your Key Responsibilities

• Perform operational reviews of IT security systems and monitoring of key consoles for alerts and follows up on alerts
• Initiates and participates in the investigation of alleged security breaches by helping to determine root cause, impact, remediation, and, if necessary, assisting with disciplinary actions and legal or criminal matters associated with such incidents
• Monitors public and private channels for adversary trends or vulnerabilities and makes recommendations or adjustments to IT security systems to ensure operational effectiveness
• Assists the Server Administrator Group and IT Infrastructure Operations Manager as requested on technology related issues
• Configures, maintains, and troubleshoots the security of the local and wide-area network as assigned
• Responsible for the documentation on security-related incidents
• Assists in the configuration of the security environment: email, identification, MFA, etc. as assigned
• Manages responses to phishing, spam, and other basic security issues
• Ensures implementation, monitors, and maintains security of passwords and accounts
• Monitors security and network logs and alerts
• Assists in the development and implementation of the security program and projects
• Defines and/or documents security-related procedures and playbooks
• Updates procedures and playbooks as policies and/or technologies change
• Works closely with the Server Administrator Group to ensure configuration and maintenance of firewalls, intrusion detection/prevention devices, and other network services
• Manages the security of Microsoft Azure and Microsoft 365 accounts, access, emails, groups, etc.
• Tracks, reviews, and prepares for changes to Microsoft 365 as released
• Responds to after-hours emergencies such as service outages or interruptions
• Stays current on network, server, and cloud-based security services