End Point Protection Analyst
Job Description
POSITION SUMMARY: The Endpoint Protection Analyst is responsible for all work activities related to the support and maintenance of the endpoint tools. Communicating team activities and reporting status to various teams for governance and compliance. WHAT YOU’LL DO: Lead the delivery of advanced Managed Extended Detection & Response (MXDR) service processes, including remote incident response, threat event lifecycle management, Threat Hunting, and Threat Intelligence activities Participate in escalated remote incident response, including incident triage and containment, forensic artefact analysis, incident reporting, and stakeholder management (customers, internal RSOC, etc.) Identify, develop, communicate and implement process improvements Actively execute Threat Hunting and other proactive activities in customer environments Support customer service communications, including operational and executive level meetings and reporting Support the implementation and maintenance of Threat Intelligence practices, including Indicators of Compromise (IOC) integration into MDR services and providing customer specific tactical and threat intelligence briefs Work closely with the Security Architect and Cloud Security Analyst team members to iteratively enhance MXDR capabilities and other managed security services (e.g. sharing activity results for detection engineering requirements) Provide proper and intelligent Incident Handling during active Incident Response engagements Develop, execute, and train staff on MXDR service threat triaging, Threat Hunting, and Threat Intelligence processes Provide technical guidance and mentorship to Privacy and Security Analysts Develop and enforce standards and processes to ensure high quality MXDR service delivery (e.g. case management standards) MUST- HAVES: Two (2) year community college diploma or university degree in Information Technology, Cybersecurity, or related discipline; equivalent combinations of education and experience may be considered. One to three (1-3) years’ of IT security related work experience required. Experience working with security operations teams required WE VALUE: Certifications in digital forensics and incident response, such as GIAC GCFA, GCFR, Preferred Strong technical experience in the execution of security operations processes, including threat event lifecycle management, Incident Response, Forensic Investigations, Threat Hunting, and Threat Intelligence activities Strong technical expertise with security operations technologies including but not limited to SIEM, EDR, Threat Intelligence, and SOAR platforms OTHER CONDITIONS: Minimal exposure to disagreeable conditions typical of an office position: exposed to stress and pressure associated with multiple priorities and deadlines Must be able to travel within the Southwestern Ontario area, when required Must be able to work evenings and weekends, when required ABOUT US: TransForm Shared Service Organization, a non-profit, unique, innovative, results-driven organization founded by hospitals in the Erie St. Clair region. Our services include: information technology and information management support, sourcing and contract management, purchasing and logistics services, as well as project management. Our Mission is to deliver exceptional service and create new innovative ways to support the health system by enhancing value and improving patient outcomes. If you are service oriented, dedicated to exceeding performance expectations and interested in reaching your full potential, TransForm is for you! We welcome and appreciate your interest in our organization. Visit our website to learn more! TransForm is committed to employment equity and welcomes diversity in the workplace. TransForm encourages applications from all qualified individuals including women, members of racialized communities, indigenous persons, immigrants & refugees, persons with disabilities, and persons of any sexual orientation, gender identity or gender expression. Upon request, accommodations for disabilities will be provided to support participation in all aspects of the recruitment process. By applying to this position, you are confirming you possess a Canadian citizenship or a permanent resident status or work permit. We thank all applicants for their interest. Only those selected for an interview will be contacted. TransForm is currently not accepting applications or solicitation from recruitment agencies. Thank you for your cooperation. Job Types: Full-time, Permanent Salary: $30.26-$35.60 per hour Expected hours: 37.5 per week Benefits: Company pension Dental care Disability insurance Employee assistance program Extended health care Life insurance On-site parking Paid time off Vision care Flexible Language Requirement: French not required Schedule: Day shift Monday to Friday Work Location: Hybrid remote in Chatham-Kent, ON N7M 5J5