Analyst - Cyber Operations

Belonging to Air Canada is to belong to a Canadian icon, Air Canada recently voted best airline in North America. Take your career to new heights by joining our innovative and diverse team at the forefront of passenger air travel.

The Analyst - Cybersecurity Operations Centre will work in an innovative and dynamic environment for one of the best airlines in North America. This position requires intelligence gathering, analytical aptitude, and problem-solving skills. Cybersecurity threats continue to evolve, and the Cybersecurity team will evolve at the same pace. The Cybersecurity Operations Centre is the first line of defense for Air Canada and its customers.
The incumbent reports to the Manager - Cybersecurity Operations Centre.

Responsibilities

• Support the monitoring, response, and remediation activities of Air Canada's technological security environment.
• Act as an incident responder and first line of defense, identifying cybersecurity threats and responding accordingly.
• Support the operational stability of the Company's security monitoring and response tools.
• Develop and guide standard operating procedures.
• Calculate and report on key service level metrics presenting the impacts of the cybersecurity operations program.
• Generate reports and dashboards on security incidents for Information Technology administrators and business unit managers to assess the effectiveness of monitoring and response capabilities.
• Conduct technical investigations to detect misuse and abuse of systems and processes.
• Work with relevant stakeholders (including customers, partners, and internal teams) and gather intelligence in investigations targeting cybersecurity threats or potential fraud for Air Canada.
• Review and analyze data from multiple internal and external stakeholders.
• Communicate analysis results and formulate recommendations to relevant stakeholders.
• Build relationships across the organization to improve and support the company's efforts to promote safety, security, and operational reliability.
• Maintain an up-to-date understanding of security threats and countermeasures. Specifically monitor illicit communication channels. Act as a subject matter expert on behalf of the Cybersecurity Operations Centre.
• Perform digital analysis and incident response (DFIR for Digital Forensics, Incident Response) and counter malicious activities using TTP and IOC processes (tactics, techniques, procedures, and indicators of compromise).

Qualifications

• University degree or relevant technical certificate, or relevant and proportional experience for the position.
• Two to three years or more of experience in IT or operations in a large enterprise, or in an operational fraud response position.
• Information security certification (Security+, GCIA, OSCP, or any other blue team training), an asset.
• Extensive technical experience with various operating systems, networks, applications, databases, and cloud computing.
• Ability to communicate effectively and collaborate with all levels of the organization, with superior oral and written communication skills.
• Superior customer service and customer interaction skills.
• IT and cybersecurity experience to understand basic fraud concepts and technology, such as IP addresses, domains, virtual private networks, etc.
• Ability to work effectively under pressure, in fast-changing environments, or under uncertain conditions.
• Open-mindedness and willingness to adapt to new or different working methods, passion for service improvement.
• Ability to cooperate with other team members, as well as build and cultivate effective business relationships.
• Demonstrate punctuality and reliability to manage multiple tasks, learn quickly, and handle a high volume of activities in a way that contributes to the overall success of the team in a fast-paced environment.

Working Conditions

• On-call support after hours for escalations.
• Ability to travel and work effectively with remote teams.
• Availability and flexibility, as the successful candidate may be required to work shifts since they report to our 24/7 IT Operations team.

Employment Conditions:

Candidates must be eligible to work in the country concerned at the time an offer of employment is presented and are responsible for obtaining work permits, visas, or other necessary authorizations. Proof of eligibility must be provided before the start date.

Language Requirements

All things being equal, preference will be given to bilingual candidates.

Diversity and Inclusion

Air Canada is strongly committed to diversity and inclusion and aims to create a healthy, accessible, and rewarding workplace that highlights the unique contribution of our employees to the success of our business.

As an equal opportunity employer, we encourage diverse applications so that we can have a workforce that is varied and representative of our customers and the communities where we live and offer our services.

Air Canada thanks all candidates for their interest, but only those selected for an interview will be contacted.