Security Analyst – DDoS Monitoring & Response

About the role

Systematix is seeking a Security Analyst to support Ontario’s higher‑education cybersecurity program. You will work directly with universities and colleges, monitoring network security controls, triaging alerts, and helping protect critical services from DDoS attacks.

Key responsibilities

• Monitor, detect, analyze, and respond to DDoS attacks across enterprise and internet‑facing environments.
• Administer DDoS monitoring and mitigation appliances (health checks, tuning, upgrades, and management).
• Investigate network anomalies, volumetric and application‑layer attacks using Arbor DDoS appliances.
• Develop and maintain detection rules, alert thresholds, signatures, and automated mitigation mechanisms.
• Perform real‑time traffic analysis to identify malicious patterns, botnet activity, and spoofed traffic.
• Coordinate mitigation with ISPs, CDN providers, cloud security vendors, and internal teams during incidents.
• Conduct incident response activities, create post‑incident reports, and maintain playbooks and documentation.
• Generate operational and executive security reports on attack trends and mitigation effectiveness.
• Collaborate with SOC, Network Operations, Infrastructure, and Cloud teams to improve resilience.
• Assist with architecture reviews and ensure DDoS appliances meet standards, patching, and SLA requirements.

Required profile

• Strong communication and organizational abilities.
• Good understanding of cybersecurity monitoring and SOC operations.
• Prior experience with Netscout and Arbor DDoS protection systems.
• Solid knowledge of TCP/IP, routing, switching, NetFlow, BGP, and firewalls.
• Familiarity with security frameworks such as NIST, CSF, ISO 27001.

Required skills

• Netscout DDoS protection platform
• Arbor DDoS protection platform
• TCP/IP networking
• Routing and switching concepts
• NetFlow analysis
• BGP protocol
• Firewall technologies
• NIST Cybersecurity Framework
• ISO 27001 standards