Intermediate Cybersecurity Analyst

CGI is the World’s 5th largest independent IT and business process services company. We provide high-end business and IT Consulting, Systems Integration and IT & Business Management services. CGI has over 100+ IP-based business solutions in 40 countries spanning Financial Services, Government, Healthcare, Manufacturing, Retail, Telecommunications, Utilities and Oil & Gas. We are a proven and demonstrated success, achieving an industry-leading track record of on-time, on-budget projects and innovative solutions.

CGI Western Canada is looking for a Cyber Security Consultant who will work with multiple clients in a variety of industries on Cyber Security Services. The position must be based in Calgary Alberta.

The Cyber Security Consultant is part of a team responsible for the growth of our security consulting services for OT and IT. In this role you will work within a diverse team and support the delivery of consulting services to multiple clients in the western Canadian market. This includes services such as red team engagements, Pen Testing and more. The Cyber Security Consultant has a base knowledge of IT and OT security concepts and has an aptitude to learn quickly.

Your future duties and responsibilities

1. Assist in creating presentations for both external (client) and internal (other CGI employees and teams)
2. Technical writing in support of opportunity response (RFI, RFP etc.)
3. Attend internal learning sessions to build more Cyber Security capabilities
4. Participate in Proof-of-Concept activities internally and with clients
5. Maintain awareness of trends in IT and OT security technology and regulatory requirements
6. Represent CGI at conferences and events
7. Collaboration with other CGI Security teams in geographically dispersed regions
8. Analyze and respond to vulnerability inquiries and vulnerability reports.
9. Research threats and attack vectors that impact web applications and infrastructure.
10. Assess new and existing applications and system deployments for vulnerabilities and design flaws and prioritize remediation efforts based on risk.

Required qualifications to be successful in this role

1. More than 5 years of Information Technology experience, with at least 3 years in Cyber Security, demonstrating practical experience.
2. Post-secondary degree or college diploma/certificate in Information Technology, Computer Science, Systems Engineering, or related Information Technology programs.
3. Client relations skills
4. Knowledge of Security technologies and controls.
5. Experience administering & configuring Linux/UNIX and or Windows based devices, including Active Directory, Exchange and DNS.
6. Hands-on experience with one or more industry leading vulnerability scanners.
7. Capable programmer in Python and PowerShell.
8. Strong troubleshooting, reasoning and problem-solving skills.
9. Team player willing to share knowledge and learn from others.
10. Minimal supervision, work autonomously, take ownership
11. Good time-management and organizational skills
12. Ability to deal with aggressive timelines and the associated pressure.
13. Ability to speak and communicate clearly from a technical perspective to users and also at the management level
14. Ability to write clear and concise technical documentation in English.
15. Must have a strong sense of curiosity and a passion for Cyber Security
16. Knowledge and experience with common pentesting tools including Burp Suite, Zed Attack Proxy, Metasploit, GoBuster, Nmap, tcpdump, Armitage, Maltego, etc.
17. Security certifications: OSCP, CEH, GIAC GPEN, GWAPT, GXPN or GAWN. For GIAC industrial cyber security GICSP, GRID and/or GCIP.
18. General knowledge of common security technologies and how those technologies work together
19. Strong troubleshooting, reasoning and problem-solving skills
20. Knowledge of industry trends and strategies to stay current
21. Ability to deal with aggressive timelines and the associated pressure
22. Ability to speak, write and communicate clearly and effectively in fluent English
23. Ability to obtain a Government of Canada security clearance of Level 1 (Enhanced Reliability Clearance - ERC)

Desirable qualifications

1. Familiarity with OT cybersecurity including NIST CSF, ISA/IEC 62443 and NERC.
2. Understanding of information security frameworks such as ISO 27001, COBIT.
3. Strong knowledge of MITRE ATT&CK and OWASP
4. Familiarity with PCI, MITS, ITSG 33 or other compliance requirements.
5. Ability to obtain a Government of Canada security clearance of Level II (Secret).

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we recognize the richness that diversity brings. We strive to create a work culture where all belong and collaborate with clients in building more inclusive communities. As an equal-opportunity employer, we want to empower all our members to succeed and grow. If you require an accommodation at any point during the recruitment process, please let us know. We will be happy to assist.

Come join our team—one of the largest IT and business consulting services firms in the world.