Senior Security Analyst

The incumbent will be part of a primarily technical team responsible for design build and run of the primary customer facing and network perimeter security controls.

He/she will provide operational support for information security platform/infrastructure strategies for the Bank. Also, the person will provide timely response to escalations of critical issues to evaluate solutions, coordinate recovery and ensure resolution.

**Accountabilities**:

- Acts as a trusted advisor to assigned business/group.
- Contributes to strategic plans, technology roadmaps, and standards and promotes adherence to them.
- Anticipates and reduces complexity for others.
- Takes a leadership role in projects to implement new capabilities, significant upgrades, and product retirement.
- Maintain information security platforms to meet requirements for security functionality, performance, scalability and resiliency.
- Assist the Design and Solutions team to research and tests new cybersecurity products and innovations to support tactical and strategic decision making.
- Provides advice, counsel and support on information security platforms and services and recommends solutions.
- Develops and implements changes to streamline and integrate security processes and systems in the organization.
- Leads continuous improvement activities and root cause analysis with the goal of strengthening information security capabilities.
- Builds effective relationships with internal/external stakeholders.
- Troubleshoots complex issues with internal and external stakeholders as required. Breaks down strategic problems, and analyses data and information to provide insights and recommendations.
- Works independently and regularly handles non-routine situations.

This role requires the incumbent to work after regular business hours and on-weekends (Saturday and/or Sunday) in support of infrastructure changes that can not take place during the day and/or business hours. On-call work will be required. Cadence is every 4-6 weeks for 1 week.

**Requirements**:

- Minimum 4 to 7 years of relevant experience and a post-secondary degree in Computer Science, Engineering, Information Systems, Information Security, or a related field of study or an equivalent combination of education and experience.
- Strong experience with network protocols and network diagnostics and network related certifications from Cisco, ISC etc. are preferred.
- Strong experience with Network Security controls specifically: Firewalls, Intrusion Prevention, Web Application Firewall, Malware Sandbox, Cloud security, Controls (native and non-native), and Proxy with experience in DLP & TLS interception.
- Strong experience with Cloud security controls: Cloud DDoS (Akamai), Cloud WAF (akamai), Anti-Automation (Akamai, Shape Security) and experience working in AWS / Azure environment.
- Has at least one certification in a related field, with strong preference for Information security certifications from a well-recognized institution (e.g. (ISC)2, ISACA, SANS).
- Understanding of multiple information security platforms and able to solve complex issues, with deep/advanced understanding of at least one information security platform - In-depth.
- Technical and system-level expertise in one or more information security solutions and/or extensive background in IT design and engineering.
- Knowledge of information security design and engineering concepts, practices, and technology obtained through formal training and work experience.
- Knowledge of the technical/business environment and the corporate processes and procedures.
- Deep knowledge and technical proficiency gained through extensive education and business experience.