Permanent Full Time - Are you looking to join an organization that values and understands the importance of cyber detection and response, operationally and tactically? If so then we are looking for you, our next: Detection Analyst. The Detection Analyst is a critical role reporting to the Manager, Detection Enablement within our Global Security Operations Centre (SOC). In support of Great-West Lifeco global security operations, the detection analyst will help mature the detection processes and capabilities to better defend our environments. You will be on the front lines of innovation working with a highly motivated team focused on identifying and developing solutions to detect and stop adversaries. This role will support our global 24/7 SOC by providing high-fidelity signals and technical analysis aimed to detect adversary tactics, techniques, and behaviors. What you will do <ul style="text-align:justify"> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Actively work with our threat operations, threat intelligence, and detection engineering teams to enhance the processes that support the SOC team’s mission: </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Assist threat modelers with architecture analysis, threat modeling and technical design reviews of various solutions </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Ensure detection coverage aligns with threat model findings </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Translate threat model outputs into actionable detection requirements </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Define detection use cases and data source requirements </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Perform detection gap analysis between threat models and SIEM telemetry </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Prioritize detection use cases </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Work with stakeholders to ensure effective implementation of detection use cases </li> <li style="font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Define and tune data sources to better identify and stop threat actor activity </li> </ul> What you will bring <ul> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Query language proficiency (YARA, SQL, KQL, etc) </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Experience with git and common continuous delivery processes, JIRA and Confluence </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Effective written and verbal communication skills </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Strong community building or group collaboration skills </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Ability to self-teach, research, or quickly learn new technical and non-technical topics </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Ability to break down complex problems or systems using a hands-on approach </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Solid technical background related to at least one of application development, systems administration, network administration, systems architecture, cloud service providers </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Strong cybersecurity and application security background </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Familiarity of the core functionalities of security operations centres and detection engineering teams </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Ability to work independently and function effectively as part of a team in a dynamic environment </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">The ability to work under stressful conditions for sustained periods of time </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">A desire to make it harder for adversaries to succeed </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">A degree or equivalent education in a related discipline such as Computer Science or Cyber Security, or a Certification in Information Security, or a combination of training and experience within Cyber Security </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Experience working in a SOC environment </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Specialized Knowledge <ul> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Analytical capabilities and a strong ability to think creatively when approaching issues </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">An ability to analyze logs from multiple sources (e.g. firewall, cloud, endpoints) to identify and investigate security events and anomalies </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">An understanding of cyber advanced persistent threats, threat actors, IOC’s and TTPs </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Deep understanding of Cloud and Application Security Best Practices, including threat modeling </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Familiarity with the Lockheed Martin Kill Chain analysis, MITRE ATT&CK framework, STRIDE threat modeling framework </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Familiarity with the concept of detection engineering </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Ability to author products for peer and management audience levels </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Understanding of security technologies (intrusion detection/prevention system, network and operating system security, network firewall, WAF, SIEM, log management, VPN) </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Familiarity with incident handling processes and techniques </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Knowledge of the cyber threat landscape and how to apply attacker motivation, capability, and intent to an organizational threat profile</li> </ul> </li> <li style="text-align:justify;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Reliability Status Security Clearance – this can only be completed with candidates who receive an offer of employment. This is a personal security status that is required as a condition of employment before an employee can gain access to Protected B information, assets or work sites as outlined by the Government of Canada website. The cost of submitting these checks will be covered by Great West Life.</li> </ul>- The base salary for this position is between $64,700.00 - $114,700.00 annually. This represents base salary only and does not represent other variable compensation components of our total compensation ( i.e. annual bonus, commission etc). If you are selected to move forward in our recruitment process, your recruiter will be able to discuss additional details of our total rewards program with you. Career opportunities will be open a minimum of 5 business days from the date of posting, closing dates will vary depending on the search activity. All applications received will be reviewed on a rolling basis. Grow with Canada Life We’re united by a shared purpose: to improve the financial, physical and mental well-being of Canadians. Our company is trusted by 1 in 3 Canadians and contributes to the strength of communities across the country. We’re looking for people who live our values everyday: we step up, we do the right thing, and we deliver – for our customers, communities and each other. Are you someone who always strives to do the right thing, who steps up for themselves and others, and who delivers with impact? Then we want to hear from you! What we offer: We’re committed to supporting our employees through every stage of their career. Here’s what you can expect as a full-time or part-time permanent team member: <ul style="margin-top:0.0in;margin-bottom:0.0in;text-align:justify" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Career Development: Opportunities for career advancement, access to industry-leading learning programs and up to $2,000 annually towards education reimbursement. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in;text-align:justify" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Health & Wellness: Flexible health and dental benefits, plus a $5,000 mental health benefit to support your well-being. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in;text-align:justify" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Time Off: In addition to regular vacation and personal days, we support community involvement with a volunteer day. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in;text-align:justify" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Financial Security: Company-matching pension plan, share ownership program and additional investment options. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in;text-align:justify" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Rewards and Recognition: Employee recognition programs, service milestone celebrations, employee discounts and more! </li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Emphasis on Community: We provide a workplace where employees feel connected and supported through Employee Resource Groups (ERGs), mentorship programs, social clubs and events. </li> </ul> Learn more about <a style="color:dimgray" href="https://www.canadalife.com/about-us.html" target="_blank" rel="noopener">Canada Life</a>. We’re committed to removing barriers and ensuring equal access to employment. Applicants requiring reasonable accommodation during the application process may contact <a style="color:dimgray" href="mailto:[email protected]" target="_blank" rel="noopener">[email protected]</a>. All information provided will be handled in accordance with applicable laws and Canada Life policies. Canada Life would like to thank all applicants, however only those who qualify for an interview will be contacted. #LI-Hybrid

Detection Analyst (Winnipeg Manitoba, MB, CA, R3C 1V3) @ The Canada Life Assurance Company

About this role

Ready to apply?