Analyst, Cyber Security & Network Infrastructure

Job Title: Analyst, Cyber Security & Network Infrastructure

Status: Full-time, Permanent

Reporting to: Manager, IT Services

Location: Ottawa, ON (On Site Role)

About Lee Valley:
Since 1978, Lee Valley has recognized that for many, woodworking and gardening are more than just hobbies. Lee Valley Tools enjoys a proud history of providing high-quality woodworking, gardening, hobby, hardware, gift and seasonal merchandise to customers worldwide. We pride ourselves on providing quality products and renowned customer service.

Lee Valley has been honored with many prestigious awards, including being recognized as one of Canada's Best Managed Companies in 2023 by Deloitte and one of Canada's Best Employers by Forbes in 2018. Additionally, we ranked #1 for In-Store Experience in Ontario by Leger Marketing Inc.

A position at Lee Valley is more than just a job – we honor the time and dedication that our people give by providing sustained and meaningful employment while striving to provide an environment where learning and development are encouraged.

Overview:

Lee Valley is seeking a passionate Cyber Security and Network Infrastructure Subject Matter Expert to be a vital part of our IT team. If you thrive on IT security and systems, and love working in a dynamic, energetic environment, we want you on board.

In this role, you'll tackle threats head-on, configure and optimize security systems, and provide critical recommendations. You'll also engage in a variety of IT activities, contributing to our innovative and collaborative team.

As a Cyber Security and Network Infrastructure Analyst at Lee Valley, you will focus on safeguarding our digital assets and ensuring the resilience of our network infrastructure with a focus on PCI compliance. Your primary responsibilities will include analyzing and mitigating security threats, configuring and refining our security systems, and providing strategic recommendations to enhance our IT security posture. Additionally, you will collaborate with various teams on diverse IT projects, contributing to the overall effectiveness and innovation of our IT operations.

Key Responsibilities:

Monitoring and Incident Management:

• Threat Monitoring: Utilize various security tools to actively monitor security alerts, logs, and events across our infrastructure.
• Incident Triage: Conduct initial analysis of security alerts to determine their validity and potential impact.
• Incident Response: Escalate confirmed security incidents to senior analysts and follow established response procedures.
• Threat Hunting: Proactively search for potential threats and vulnerabilities using various security tools and systems. Investigate security issues, analyze root causes, and mitigate risks.
• Log Analysis: Review and analyze security logs to identify patterns, anomalies, and indicators of compromise.
• Documentation: Maintain detailed records of security incidents, investigations, and actions taken. Develop and implement incident response plans.
• Collaboration: Work closely with the IT team to resolve security issues.
• Continuous Learning: Stay up-to-date on the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Recommend: Research and recommend technologies to reduce security risks.

Technical Support and Infrastructure:

• Pier Support: Provide first and second-level technical support to staff and collaborate closely with the network infrastructure team on infrastructure support. Participate in after-hours on-call support rotation.
• Disaster Recovery: Manage data backup and archiving infrastructure.
• Monitor and Update Security Systems: Endpoint security, software patching, and configurations.
• Support Existing Systems: Support network infrastructure, desktops, servers, disaster recovery systems, and IT/WAN infrastructure. Install, maintain, and upgrade IT hardware and software. Troubleshoot hardware and software issues with internal and external support.
• System Upgrades: Engage in IT modernization projects.

Compliance and Security Posture:

• Recommendations: Make recommendations to enhance our security posture.
• Maintain PCI compliance: Conduct security audits, vulnerability assessments, ASV scans, and penetration testing.
• Manage Cyber Security awareness program: Conduct security awareness training for employees and prepare reports.
• Reporting: Prepare a regular monthly Security Posture and State of the Union executive report.

Experience and Education:

• University degree or College diploma in Computer Science and IT Security, or relevant IT Security Certifications, such as Security+, CySa+, CEH, CISSP or 2-3 years’ experience in IT Security.
• Solid understanding of cybersecurity principles, common attack vectors, and threat intelligence.
• Solid understanding of Windows Desktop/Server Environments.

Knowledge and Skills:

• Windows, Fortigate or Azure Security Certifications.
• Qualys Systems (Vulnerability and Application scanning).
• Fortinet EDR and Firewalls (EDR console, Firewall Reviews, FortiAnalyser).
• Windows Desktop/Server Environment (Security, Hardening).
• Network Segmentation, Microsoft Azure, Office 365.
• PowerShell Scripting.
• PCI Compliancy Administration.
• Previous experience in customer service in a retail environment.
• Fluency in French (spoken and written).
• Ability to work both independently and on a team.
• Excellent time management, analytical, problem-solving, and decision-making skills.
• Ability to multi-task and manage priorities under pressure.
• Must be customer-centric with excellent oral and written communication skills, interpersonal skills.
• Communication skills should include understanding your audience.
• Highly organized and motivated with strong attention to detail.
• Excellent analytical and decision-making skills are crucial to this position.

What we offer…

• Competitive compensation program including competitive base salary, a robust health and dental benefits package, as well as a matching group retirement plan.
• Paid vacation and sick leave.
• Lee Valley discount.
• A family-oriented environment that supports growth and development for all employees.

Diversity and Inclusion:

At Lee Valley, we are proud to celebrate and foster a diverse team of professionals. We take pride in nurturing an inclusive culture that empowers our people to be their authentic selves, celebrate their differences and love where they work. Our diverse community combined with our inclusive culture is what sets us apart in the industry.

We encourage all candidates to apply for job opportunities with Lee Valley regardless of race, national origin, colour, religion, age, gender identity or expression, sexual orientation, marital and family status, or disability.

If you require accommodation during the recruitment and selection process, please do not hesitate to reach out.

How to Apply:

Please visit our careers page at https://www.leevalley.com/en-ca/careers

We thank all applicants; however, only those selected for an interview will be contacted.