Infrastructure Security Analyst - USA at CanadianBankNoteCompany

Internal Job Title: IT Security Analyst Job Type: Permanent, Full-Time Job Location: United States Work Model: Remote    Position Summary As an IT Security Analyst at CBN Secure Technologies Inc., you will play a key role in both the strategic and hands-on protection of our enterprise systems. You will be responsible for hardening infrastructure, integrating security systems into deployments, and directly supporting the secure configuration of enterprise applications while managing SIEM operations, incident response, and vulnerability reviews. Your work will also include building automation pipelines, performing system audits, and collaborating with infrastructure teams to enforce security standards from the ground up. We encourage fresh ideas and value your input on how security should be implemented, giving you the opportunity to shape our security program. Responsibilities • Technical Security Operations • Deploy, configure, and harden Linux systems and applications with a security-first approach, ensuring on-premises installations follow best practices. • Build, maintain, and secure pipelines using automation and scripting languages to streamline configuration management and enforce security baselines. • Collaborate with infrastructure and operations teams to integrate security into deployments, upgrades, and system migrations. • Security Incident and Event Management • Design, implement and maintain automated processes within the SIEM environment to enhance threat detection, incident response and log management. • Collaborate with cross-functional teams to integrate security controls and enhance the overall effectiveness of the SIEM solution. • Develop and maintain automated responses to common security incidents. • Operational Security Prime • Collaborate with Risk and Compliance personnel to gather evidence for Compliance requirements (SOC II, ISO 27001, PCI, NIST 800-53, etc.). • Develop and implement processes for daily/weekly/monthly evidence collection, ensuring accuracy, completeness and timeliness in response to audit requests. • Collaborate with stakeholders to address compliance gaps and implement corrective actions. • Technical Security Analysis • Monitor SIEM alerts and investigate security incidents to determine the root cause and appropriate remediation actions. • Design, implement and maintain automated security processes to enhance efficiency and reduce response times. • Prioritize and remediate identified vulnerabilities in collaboration with system owners and IT teams. • Create and maintain documentation related to security policies, procedures and configurations. • Collaboration and Communication • Communicate security risks and findings to technical and non-technical audiences effectively. • Build relationships with stakeholders across groups to understand needs and requirements and the associated notification process.