Analyst - Cyber Operations

Appertaining to Air Canada is to appertain to a Canadian symbol, Air Canada recently elected best airline in North America. Take off your career by joining our innovative and diverse team at the forefront of passenger air transport.

The Analyst - Cybersecurity Operations Center will work in an innovative and dynamic environment for one of the best airlines in North America. This position requires intelligence collection, analytical aptitude, and problem-solving skills. Cybersecurity threats continue to evolve, and the Cybersecurity team will evolve at the same pace. The Cybersecurity Operations Center is the first line of defense for Air Canada and its customers.
The incumbent reports to the Manager - Cybersecurity Operations Center.

Responsibilities

• Support the monitoring, response, and remediation activities of Air Canada's technological environment regarding security.
• Act as an incident responder and first line of defense, identify cybersecurity threats, and intervene accordingly.
• Support the operational stability of the Company's security monitoring and response tools.
• Develop and guide standard operating procedures.
• Calculate key service level metrics presenting the effects of the cybersecurity operations program and report on them.
• Generate reports and dashboards on security incidents for Information Technology administrators and business unit managers to evaluate the effectiveness of monitoring and response capabilities.
• Perform technical investigations to detect misuse and abuse of systems and processes.
• Work with relevant stakeholders (including customers, partners, and internal teams) and collect intelligence in investigations targeting cybersecurity threats or potential fraud for Air Canada.
• Review and analyze data from multiple internal and external stakeholders.
• Communicate the results of analyses and make recommendations to relevant stakeholders.
• Establish relationships throughout the organization to improve and support the company's efforts to promote security, safety, and reliability in operations.
• Maintain an up-to-date understanding of security threats and countermeasures. Monitor illicit communication channels in particular. Act as a subject matter expert on behalf of the Cybersecurity Operations Center.
• Perform digital analytics and incident response (DFIR for Digital Forensics, Incident Response) and counter malicious activities using TTP and IOC processes (tactics, techniques, and procedures, and indicators of compromise).

Qualifications

• University degree or relevant technical certificate, or relevant experience proportional to the position.
• Two to three years of experience or more in IT or operations in a large enterprise, or in an operational fraud response position.
• Information security certification (Security+, GCIA, OSCP, or any other blue team training), an asset.
• Extensive technical experience in various operating systems, networks, applications, databases, and cloud computing.
• Ability to communicate effectively and collaborate with all levels of the organization, with superior oral and written communication skills.
• Superior customer service and customer interaction skills.
• IT and cybersecurity experience to understand basic fraud concepts and technology, such as IP addresses, domains, virtual private networks, etc.
• Ability to work effectively under pressure and in rapidly changing environments or under uncertain conditions.
• Open-mindedness and willingness to adapt to new or different working methods, passion for service improvement.
• Ability to cooperate with other team members, as well as establish and cultivate effective business relationships.
• Demonstrate punctuality and reliability to manage multiple tasks, learn quickly, and manage a high volume of activities to contribute to the overall success of the team in a rapidly evolving environment.

Working Conditions

• After-hours on-call support for escalation paths.
• Ability to travel and work effectively with remote teams.
• Availability and flexibility, as the successful candidate may be required to work shifts since they report to our 24/7 IT Operations team.

Employment Conditions:

Candidates must be eligible to work in the country concerned at the time a job offer is presented and are responsible for obtaining work permits, visas, or other necessary authorizations. Proof of eligibility must be provided before the start date.

Language Requirements

Equal skills being equal, preference will be given to bilingual candidates.

Diversity and Inclusion

Air Canada is resolutely committed to diversity and inclusion and aims to create a healthy, accessible, and rewarding workplace that highlights the unique contribution of our employees to the success of our business.

As an equal opportunity employer, we encourage diverse applications to build a workforce that is varied and representative of our customers and the communities where we live and serve.

Air Canada thanks all candidates for their interest, but only those selected for an interview will be contacted.