Cybersecurity Analyst II (Computer Systems Analyst II)

Position Details

Office of the Chief Information Officer | Government of Newfoundland and Labrador

The Office of the Chief Information Officer (OCIO) provides professional information technology and information management/protection capabilities to support the business of government and the citizens of Newfoundland and Labrador. Responsibilities include IT and IM/IP coordination, planning, budgeting and policy development; development and operation of government computer systems and infrastructure; procurement of IT goods and services; management of IT-related agreements and contracts; and administration of the Management of Information Act.

The Office of the Chief Information Officer is seeking a Cyber Security Analyst II (Tier 2 Security Analyst) to join its Cyber Security Operations team. The successful candidate will conduct advanced security analysis, incident response, threat hunting and monitoring using Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID, Microsoft Azure, Microsoft 365 and other enterprise security technologies. The analyst will investigate escalated alerts and incidents; correlate endpoint, identity, cloud, network and application telemetry; determine scope and impact; and support containment, eradication and recovery. Responsibilities include advanced log analysis and Kusto Query Language (KQL) queries; technical investigations and threat hunting; analysis of device timelines and identity signals; documentation of findings and recommendations; development and tuning of detection rules; vulnerability assessment and remediation support; maintenance of incident records and evidence integrity; preparation of procedures and playbooks; and technical guidance to Tier 1 analysts. The successful candidate will collaborate with senior analysts, technical teams and business stakeholders and participate in on-call incident response when required. Other related duties as required.

Screening Criteria

1. Completion of a degree or diploma in Information Technology, Computer Science, Cybersecurity or a related discipline. Equivalencies will be considered.
2. Experience investigating cybersecurity alerts, incidents or threats in an enterprise environment.
3. Experience using security technologies such as SIEM, EDR, Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID or comparable platforms.
4. Experience analyzing logs and security telemetry to identify threats, vulnerabilities, scope, and impact.
5. Experience supporting incident containment, remediation, recovery, or post-incident activities.
6. Experience with cloud security, threat hunting, digital forensics, malware analysis, KQL or a relevant cybersecurity certification would be considered an asset.

Assessment Criteria

1. Knowledge of cybersecurity operations, threat detection, incident response, and evidence-handling principles.
2. Knowledge of common cyber threats, attack techniques, security vulnerabilities, and mitigation practices.
3. Knowledge of enterprise identity, endpoint, cloud, network, and application security technologies.
4. Ability to analyze complex technical information and solve problems.
5. Ability to make sound and timely decisions during cybersecurity investigations.
6. Ability to manage time, priorities, and multiple concurrent tasks.
7. Ability to collaborate effectively as part of a multidisciplinary team.
8. Ability to communicate effectively, both verbally and in writing.
9. Client service orientation.

Conditions of Employment

Information for Applicants

For more information about this opportunity please contact Michael Pelley, Manager of Cybersecurity Operations at MPelley@gov.nl.ca.

• The Government of Newfoundland and Labrador values inclusion, diversity, equity and accessibility, and a workplace culture that benefits from varying ideas and lived experiences.
• Accommodations and alternate assessment formats are available upon request at any stage of the recruitment process by contacting recruitment@gov.nl.ca, 709-729-0130 or toll free at 1-888-729-7690. Video Relay Service (VRS) calls are welcomed.
• We are committed to providing an inclusive recruitment process with a focus on removing barriers. For common potential accommodations and adjustments during the recruitment process, click here. Accommodation information will be kept confidential.
• Preference will be given to applicants who are a Canadian citizen or permanent resident of Canada or those who are legally entitled to work in Canada.
• Applications must be received by the closing date stated in the job posting.
• It is the responsibility of applicants to submit a resume that clearly demonstrates the required screening criteria outlined in the job description.
• Applications must contain current contact information, including phone number, mailing and, e-mail addresses.
• Application information must be factual, complete and current, to date of submission.
• This competition may be used to fill future similar vacancies with the Government of Newfoundland and Labrador.