IT Security Analyst – Cybersecurity Operations

About the role

The IT Security Analyst will support and continuously improve the cybersecurity program for Canucks Sports & Entertainment and Aquilini Group properties. This hands‑on position is ideal for a professional with a solid foundation in cybersecurity and IT who wants to deepen expertise in security technologies, incident coordination, and risk management.

Key responsibilities

• Review, investigate and coordinate response to security alerts from MDR, EDR, Microsoft Defender and related tools.
• Manage vulnerability findings, assess risk and drive remediation efforts.
• Conduct risk assessments for systems, projects and vendors; maintain the risk register and document exceptions.
• Support secure design and deployment of infrastructure projects, ensuring security requirements are met.
• Implement, maintain and improve Microsoft security solutions (Defender, Entra ID, Conditional Access) and endpoint protection platforms.
• Assist with identity and access management processes, including privileged access reviews.
• Develop and refine SIEM use cases, onboard data sources and improve alert quality.
• Perform log analysis and threat‑hunting across endpoint, network, cloud and identity environments.
• Support security awareness initiatives, network security operations, firewall rule reviews and segmentation projects.
• Assist with third‑party assessments, penetration tests and audit remediation, as well as business continuity and disaster‑recovery activities.

Required profile

• 2–5 years of experience in cybersecurity, infrastructure or a related IT role.
• Strong working knowledge of Microsoft 365, Windows administration and core security concepts.
• Ability to prioritize work, take ownership of tasks and communicate technical risks to business stakeholders.

Required skills

• Microsoft 365
• Windows administration
• Microsoft Defender
• Entra ID
• Conditional Access
• Security Information and Event Management (SIEM)
• MDR and EDR solutions
• Endpoint protection platforms
• Vulnerability management tools
• Risk assessment methodology
• Log analysis and threat hunting
• Firewall management and network segmentation
• Identity and Access Management (IAM)
• Privileged access review processes