Analyst, Cybersecurity

Hybrid Position: Starting in January 4 days at the office. VIA Rail is carrying out ambitious projects to modernize its services and infrastructure—from a new ultramodern train fleet to ongoing infrastructure improvements. By working for VIA Rail you will be part of a collective effort toward sustainable mobility. As a Cybersecurity Analyst you will focus on threat detection, analysis and incident response, continuously monitoring and analyzing cybersecurity incidents and threats to ensure timely detection and response. You will collaborate closely with the Cybersecurity Operations Team and Managed Security Service Provider and be pivotal in protecting the organization’s information assets against potential cybersecurity threats. You will also maintain and evolve VIA’s cybersecurity platforms, handle cybersecurity‑related requests, and contribute to continuous improvement of cybersecurity capabilities, processes and protocols. Responsibilities Monitoring and Analyzing Monitor alerts from detection platforms and events from various sources, including the Extended Detection and Response (XDR) platform, the Managed Security Services Provider, Identity Protection tools, and network traffic analysis. Analyze and investigate security incidents to determine their impact, scope, and root cause. Triage alerts, identifying and resolving false positives while escalating genuine attacks. Handle cybersecurity requests and investigations, including Identity & Access Management. Incident Response Respond to cybersecurity incidents escalated by the Managed Security Services Provider, XDR platform, and internal partners through the ticketing system. Assist in documenting, creating, and evolving automated playbooks in response to incidents. Vulnerability Management Identify and prioritize vulnerabilities and work with IT teams to remediate them. Assess the organization’s exposure to threats as new advisories are published in private and public threat intelligence feeds. Cybersecurity Tool Management & Evolution Maintain and configure cybersecurity tools and technologies (Security Email and Web Gateway, Threat Detection Tools, Vulnerability Platform, Privileged Access Management, Cloud Security). Monitor the performance and health of security systems to ensure optimal operation. Implement updates, patches, and upgrades to security tools and systems. Collaborate with other IT teams to integrate and optimize cybersecurity technologies. Continuous Improvement Stay current with the latest cybersecurity threats, trends, and technologies. Develop and maintain internal incident response playbooks and procedures. Continuously improve security measures based on audit feedback and emerging threats. Implement new technologies and processes to strengthen cybersecurity posture. Compliance and Reporting Ensure compliance with relevant security policies, standards, and regulations. Support audit activities related to information gathering and documentation improvement. Respond to auditor requests in collaboration with the Senior Advisor, GRC. Contribute to the implementation of audit recommendations and continuous improvement of the Governance, Risk, and Compliance (GRC) program. What We Are Looking For Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field. 2 to 4 years’ experience in an IT support role such as end‑user support, network administration, systems or server administration. At least one year of experience in a cybersecurity domain. Foundational knowledge of cybersecurity operations. Basic understanding of networking (protocols, configurations and security measures). Certifications such as CISSP, CISA, CompTIA Security+ or CEH are assets. Excellent written and verbal proficiency in both official languages (English/French). Understanding of cybersecurity principles, threats, and vulnerabilities. Experience monitoring SIEM systems and cross‑referencing indicators with threat intelligence feeds. Experience monitoring networks, detecting threats, and responding to incidents. Familiarity with common attack vectors such as phishing, malware, business email compromise, Man‑In‑The‑Middle and ransomware. Proficiency in triaging and remediating security events. Strong analytical, troubleshooting and problem‑solving skills. Experience with network and security technologies (firewalls, IDS/IPS, public key cryptography, mail and web hygiene platforms, endpoint security). Experience with identity platforms, RBAC, principle of least privilege and access management. Experience configuring and utilizing vulnerability assessment technologies. Ability to analyze the current threat landscape and attack vectors. Demonstrated ability to contribute to the implementation of detection technologies. Strong decision‑making capabilities and ability to evaluate costs and benefits. Ability to establish effective working relationships with others. Experience with report writing, investigational techniques and communicating to large audiences. Client‑oriented with a focus on meeting internal and external users’ expectations. At VIA Rail, we are proud to be an employment‑equity employer and strive to form teams that reflect the diversity of Canadian society. We aim to remove barriers to employment accessibility and aspire to provide an inclusive and equitable work environment where everyone is valued, regardless of identity or differences, to enable them to reach their full potential. If you need assistance in making the recruitment process or the position you are applying for more accessible, please let us know. Alternate arrangements may be offered to individuals who request them at any stage of the recruitment process. All information received in relation to arrangements will be kept confidential. Note that we will only contact those who are selected for an interview. Join our 3,000 other employees in helping provide Canadians with a safe, accessible, environmentally sustainable way to travel #J-18808-Ljbffr