London, ON
Our client in London, Ontario is looking for an IT Security Analyst. This individual will be responsible for all thing security in the company.

Position Responsibilities
 Supports security technology to ensure proper operation, including upgrades and installations.
 Aids in facilitating security training and awareness delivery.
 Reports, records and works with departments to resolve security related issues and incidents.
 Owns the security position of the company and all its products and services, including PCI compliance,
security monitoring, audits, and overall compliance tasks related to security.
 Responsible for analyzing, developing, implementing and enforcement of security, privacy and data
protection requirements, policies and corporate technical guidelines.
 Identify risks to the business by evaluating business objectives, system requirements, designs and
integration points.
 Monitor and continually improve overall cybersecurity, including application security, network security,
data security, and mobile security.
 Establish actionable security levels to address risk, define mitigation strategies, metrics, reporting and
program services.

Education, skill and experience required:
 Bachelor's degree in computer science/related technical field or equivalent experience.
 Knowledge of how to properly secure and audit Unix/Linux and Windows servers and desktop systems.
 10+ years’ experience in the IT industry.
 7+ years’ experience in security/ cyber security.
 Experience working in Microsoft Azure.
 Knowledge of common application vulnerabilities, current threat vectors, and mitigations.
 Experience working with teams using Agile, XP, Lean development practices.
 Hands on experience with web application and secure code testing tools and services.
 Knowledge of IP protocols, networks, security architectures and security threats in an IP network.
 Knowledge of incident handling and response, exploit analysis, tool deployment, network intelligence
gathering, incident analysis, reverse engineering of attacker methods, digital forensics methods and
procedures, eDiscovery, and demonstrated analytical analysis of information security and intrusion
analysis.
 Hands-on experience using port and network scanners.
 Experience working with IP networking, networking protocols and understanding of security related
technologies including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic mail,
AD/LDAP, NAC, SSL/TLS, AV, WAF, SIEM, DLP, IPS).
 Experience with VMware and applying security to virtual platforms.
 Experience working with internet and web application security techniques. (SANS, OWASP, WASC).
 Experience working with leading firewall, scanning, filtering and intrusion detection
technologies/services.
 Experience working with logging and file integrity monitoring tools.
 Experience with ITSEC standards and best practice frameworks. (ISO 27001/27002, NIST, Cobit, ITIL, PCI).
 Preferred security certifications (CISSP, CEH, GIAC Security Essentials, CompTIA Security+).
 Familiarity with IT security standards, compliance regulations and best practice frameworks (ISO 27001,
ISO 27002, NIST, OWASP, SANS, SOX, ITIL, PCI DSS)




for immediate consideration please contact Edwin.chang@randstad.ca