Security Operation Analyst

This is a fully remote position, open to applicants in Canada.

📋 Description

• Deliver ongoing security monitoring, detection, and incident response for cloud infrastructure and the integration platform.

• Supervise SIEM/EDR alerting and detection tools; triage, investigate, and escalate confirmed security incidents.

• Manage the vulnerability management process from scanning and penetration testing findings through to remediation.

• Collaborate with technical owners across IT Operations, Cloud Engineering, and Site Reliability Engineering (SRE).

• Maintain and optimize detection rules and alert logic to minimize false positives and enhance monitoring coverage.

• Serve as a secondary point of contact for security incident response alongside the Security & Compliance Lead.

• Adhere to established Jira-based escalation protocols.

• Assist in the collection of audit evidence for SOC 2 and ISO 27001 compliance.

• Work with Cloud Engineering and Integration Support/SRE teams during incidents to identify root causes and scope.

• Stay informed about emerging threats, vulnerabilities, and best practices in cloud/SaaS/iPaaS security.

• Ensure that AI-assisted triage or detection tools align with Flexspring's AI & R&D Safe Sandbox Policy.

⛳️ Requirements

• A Bachelor's degree or College Diploma in Information Technology, Computer Security, Computer Science, or equivalent experience.

• Practical experience with security monitoring tools (SIEM, EDR, or similar) and incident triage/investigation.

• Familiarity with vulnerability management processes, including scanning, prioritization, and remediation tracking.

• Understanding of cloud infrastructure security fundamentals, preferably in AWS: networking, IAM, and logging.

• Knowledge of compliance frameworks such as SOC 2 and/or ISO 27001.

• Excellent analytical and documentation skills.

• Proficient in working with Jira-based ticketing and escalation processes.

• Security certifications (Security+, GSEC, GCIH, or equivalent) are preferred.

• Experience with AWS-native security tools (GuardDuty, Security Hub, CloudTrail) is preferred.

• Familiarity with SaaS/iPaaS environments or HR technology platforms is preferred.

• Scripting/automation experience (Python or similar) to aid in detection tuning or reporting is preferred.

• Experience in supporting external audits or coordinating penetration tests is preferred.

🏝️ Benefits

• Work from home with flexible hours.

• Enjoy 4 weeks of paid vacation each year.

• Comprehensive health benefits package available for you and your family.

• Participate in team events and opportunities to connect with colleagues.

• Gain the chance to work with cutting-edge technologies.

• Competitive base salary.