Security Analyst

Security Analyst – Vancouver, BC

Permanent | Hybrid | $60,000 – $80,000 CAD

ABOUT US

STRIVE is a specialist recruitment firm offering proactive recruitment solutions in the areas of Technology, Accounting & Finance, Corporate Administration, and Manufacturing Operations. STRIVE supports various clients from small to medium-sized enterprises to Fortune 500 organizations for their permanent, contract, and temporary recruitment needs.

THE ROLE

STRIVE Recruitment is proud to partner with a well-established, 100% Canadian-owned hospitality group with a diverse portfolio spanning hotels, restaurants, resorts, sports, construction, and asset management, and operations across Canada, the US, Ireland, and the UK for over 50 years, to recruit for a Security Analyst based in Vancouver, BC.

They offer a stable, people-focused work environment at their corporate support centre, with a comprehensive benefits package including health, dental, and vision coverage, RRSP contributions, paid time off, and employee perks.

The client is seeking a Security Analyst to help protect the organization's technology environment, systems, and information across Canada. This role monitors security activity, investigates threats, supports incident response, and maintains cybersecurity controls across corporate offices and operating locations, coordinating closely with internal IT teams and managed service providers.

Key Responsibilities

• Monitor security alerts and suspicious activity across endpoints, networks, cloud services, identity platforms, and business applications
• Triage and investigate cybersecurity incidents, escalating significant threats and supporting containment, recovery, and documentation
• Administer and monitor security technologies, including endpoint detection and response, email security, vulnerability management, firewalls, MFA, and identity access controls
• Monitor Microsoft 365 and Azure security environments, including Entra ID, Microsoft Defender, Conditional Access, logging, and alerting
• Perform vulnerability reviews and track remediation of critical patches and configuration issues
• Review user access, privileged accounts, and security groups for onboarding, role changes, and departures
• Coordinate cybersecurity activities with internal IT teams, operating locations, and managed service providers across Canada
• Support security assessments for new applications, vendors, and technology changes
• Participate in phishing simulations, cybersecurity awareness initiatives, and employee education
• Prepare reports on incidents, vulnerabilities, trends, and risks, and maintain related documentation
• Support business continuity, disaster recovery, and incident response exercises
• Provide after-hours support during significant cybersecurity incidents when required

Qualifications

• Post-secondary education in cybersecurity, information technology, computer science, or a related field, or equivalent practical experience
• 2–4 years of experience in cybersecurity, IT security, systems administration, infrastructure, or a related technical role
• Hands-on experience monitoring and investigating security alerts using security monitoring, endpoint detection, ticketing, and vulnerability management tools
• Working knowledge of Windows, Microsoft 365, Azure, Entra ID, networking fundamentals, identity and access management, endpoint security, and vulnerability management
• Understanding of established cybersecurity frameworks such as NIST, CIS Controls, and incident response lifecycle principles
• Ability to handle confidential information with discretion, travel occasionally within Canada, and provide after-hours support when required

Preferred Skills

• Experience supporting a geographically distributed, multi-site, or 24-hour operating environment, particularly in hospitality, retail, or restaurants
• Certifications such as Security+, CySA+, SC-200, SSCP, or equivalent
• Ability to communicate technical information clearly to both technical and non-technical audiences

What Success Looks Like

• Security alerts and incidents are reviewed, investigated, documented, and resolved within established timelines
• Vulnerabilities and security gaps have clear remediation actions, owners, and timelines
• User access and security controls are consistently reviewed and maintained
• IT teams and business partners receive timely, clear information during security events
• Recurring security issues decrease through effective investigation, remediation, and lessons learned