Senior Analyst, IT Security in Ottawa

A dynamic and collaborative environment focused on prioritizing and optimizing technological investments that facilitate the best student experience, as well as the activities of faculty, researchers, and staff. Our greatest strength is the people working with us. We want professionals eager to flex their intellectual muscle and achieve new heights in their career.

Position Purpose: Reporting to the Senior Manager, IT Security, the incumbent develops, implements, upgrades, integrates, tests, manages, and supports information security systems and applications. Performs real-time analysis and correlation of logs/alerts from a multitude of infrastructure, network, and security devices with a focus on determining whether said events constitute infrastructure, network, or security incidents. Responsible for researching and documenting various mitigation strategies. Provides information security education to the University community and prioritizes remediation of issues in a highly complex environment with critical uptime requirements.

In this role, your responsibilities will include:

• Security Administration and Platforms: Implement, operationalize, customize, configure, program, test, and maintain complex security systems, platforms, and solutions using multiple technologies. Provide technical recommendations for improving IT security infrastructure and assist in the coordination of audit and compliance requirements.
• Analytics and Monitoring: Monitor a wide variety of IT assets, network, and data to ensure the prevention of events that negatively impact confidentiality, availability, and integrity. Build/manage reports and analyze logs and messages to identify and report possible security violations. Collect and analyse performance reports for various systems, and report trends in hardware and application performance to assist senior technical personnel to predict future issues or outages.
• Development: Develop program code/scripts according to technical standards and security policies. Build/develop use cases for Security and/or Network Operations Centre.
• Vulnerability Assessments and Penetration Testing: Perform ongoing vulnerability assessments and penetration testing of systems and networks to ensure compliance with security policies, standards, and procedures. Interface with IT teams on implementing controls.

What you will bring:

• University degree in Computer Science, Management Information Systems (MIS) or related field or an equivalent combination of education and experience.
• Minimum 5 years of experience in a complex and diverse IT environment demonstrating experience in IT security.
• Experience with PeopleSoft security would be considered an asset.
• Experience with Microsoft Entra ID or comparable identity platforms would be considered an asset.
• Hands-on experience in application security and DevSecOps, including security assessments of web applications, APIs, and enterprise applications.
• Experience integrating applications with Single Sign-On (SSO) using SAML 2.0 and OpenID Connect, and knowledge of OAuth 2.0 authorization flows.
• Ability to configure and troubleshoot federation metadata, certificates, claims, tokens, and application access controls.
• Knowledge of secure coding, threat modelling, security design reviews, OWASP Top 10, API security risks, and secure software development life cycle (SSDLC) practices.
• Experience configuring and tuning Web Application Firewalls (WAF), onboarding applications, analyzing security events, managing exceptions, and troubleshooting false positives.
• Experience integrating SAST, DAST, SCA, and secrets scanning into CI/CD pipelines; interpreting findings; and implementing security checks and remediation workflows.
• Knowledge of container and infrastructure as code security.