Lead Security Analyst

**Lead Security Analyst**:

- Req id: 37902- Waterloo, ON, CA Richmond Hill, ON, CA Mississauga, ON, CA**OPENTEXT - THE INFORMATION COMPANY**

As the Information Company, our mission at OpenText is to create software solutions and deliver services that redefine the future of digital. Be part of a winning team that leads the way in Enterprise Information Management.

**Job Description** - **Senior Information Security Analyst**:
**ENABLING THE DIGITAL WORLD**
OpenText enables the digital world by simplifying, transforming, and accelerating enterprise information needs, on premises or in the cloud. We embrace all things digital and are committed to being the Best Place to Work for our Employees in over 140 locations around the world.

We obsess over our customers to ensure they are wildly successful in embracing the Digital World. Our customers entrust us with their most important information, we need to be their most trusted partner. What we do, we do well. What we create, we do purposefully to impact the world. If you believe in this and are passionate about enabling the Digital World then let OpenText turn your career vision into reality.

**The Opportunity**:
The Senior Information Security Analyst will fully understand a wide array of security processes and concepts. This position has specific focus on leading and performing cyber forensics investigations, reporting, and metrics. The position will provide extensive security support functions for the Open Text Commercial and Corporate infrastructure for internal and external customers. This is a hands-on role that will require detailed knowledge and sound methodologies to collect, preserve, and analyze digital evidence.

**You are great at**:

- Identifying, collecting, examining, analyzing, and preserving the integrity of resources and information for computer forensics.
- Incorporating forensic tools and developing standards, processes, and procedures for conducting forensics.
- Performing analytical analysis focused on computer operating system logs, vulnerability scans, trace data, firewall and server logs, and other available information.
- Performing post-intrusion analysis of electronic and digital media to determine the who, where, what, when, and how the intrusion occurred.
- Ensuring forensics work will be complete an performed in such a way to ensure the information remains forensically sound and a chain of custody is maintained at all times.
- Providing summary and detailed reports to varying levels of management upon completion of investigations.
- Supporting daily Operational work al that includes security monitoring, security and data/logs analysis, forensic analysis, host configuration audits, vulnerability scans, FW rule reviews, and other security tasks.
- Auditing support and artifact documentation for ISO27001, PCI, SOC1 & SCO2 audit frameworks.
- Participating in Security Incident response investigation requests.

**What it takes**:

- Demonstrated experience using EnCase, FTK, and Open Source methods and tools to perform computer forensic investigations.
- Log correlation and analysis, forensically handling electronic data, computer security investigative processes, malware identification and analysis.
- Experience briefing results to senior management and technical groups across the organization.
- Ability to work through urgent investigations with time sensitive deadlines.
- Background in low-level programming and operating systems.
- Must be familiar with Anti-Virus, Threat and Vulnerability Management, Unified Threat Management (information detection and prevention), SIEM, and DOS/DDOS.
- Experience with UNIX and Windows operating systems.
- Train security staff member on forensic program, process, and procedures

**Upon successful hire, this position will require you to undergo a security screening with the Government of Canada’s Personal Security Screening Division to be granted a ‘Reliability Status (protected)’ clearance in order to work on government contracts to access Protected B Information and assets.**

Bachelors or Masters Degree in Computer Science, Information Systems or a related field

5+ years experience in one or more of the following:
SIEM technologies

Legalities surrounding electronic discovery and analysis

Both Windows and Unix/Linux based operating systems

Electronic investigation, forensic tools and methodologies

Cyber Security Threats, Vulnerabilities & Incident Response
- Good analytic, troubleshooting and problem solving
- Strong written and verbal communication skills
- Ability to work alone with mínimal supervision effectively and efficiently
- CISSP, CISA, CISM, or ISSMP certifications preferred