Title: Sr. IT Security Analyst
Department: Information Technology
Location: 6300 Steeles Ave West, Woodbridge
Total Potential Compensation: $115,000-$140,000
Position Summary:
The Senior Security Analyst – Security Operations is responsible for operating, maturing, and continuously improving core cyber defense and detection capabilities across the enterprise. This role has a strong focus on Vulnerability Management, Endpoint Detection & Response (EDR), Network Detection & Response (NDR), and day‑to‑day Security Operations.
The incumbent will act as a senior technical resource within the SOC, providing advanced analysis, threat-driven prioritization, and operational leadership across security monitoring, incident response, vulnerability remediation, and control effectiveness measurement. The role directly contributes to improving the organization’s cyber risk posture, with measurable outcomes reflected in Security Risk Index (SRI) and other governance metrics aligned to NIST and ISO frameworks.
After-hours support and on-call duties may be required for high-severity security incidents.
Position Responsibilities:
Vulnerability Management
Own and operate the enterprise vulnerability management lifecycle, including discovery, assessment, prioritization, remediation tracking, and risk acceptance
Correlate vulnerability data with asset criticality, exploitability, threat intelligence, and exposure to drive risk-based remediation
Security Operations & Incident Response
Act as a senior escalation point for security incidents, providing deep technical analysis, containment guidance, and remediation recommendations
Coordinate incident response activities across IT Infrastructure, Network, Cloud, and Application teams
Endpoint Detection & Response (EDR)
Network Detection & Response (NDR)
Analyze network traffic, metadata, and behavior-based detections to identify lateral movement, command-and-control activity, and policy violations
Threat Detection & Threat Hunting
Metrics, Risk & Compliance
Define and maintain security operations KPIs and KRIs (incident trends, MTTR, vulnerability aging, control coverage)
Continuous Improvement & Leadership
Identity & Access Management (IAM)
Support operational security of IAM platforms (e.g., Active Directory, Azure AD / Entra ID, PAM solutions)
Monitor and investigate identity‑based threats, including credential misuse, privilege escalation, and anomalous authentication behavior
- Lateral movement via identity.
Minimum 5+ years of experience in IT Security, with strong hands-on experience in Security Operations.
College Diploma or University Degree in Computer Science, Engineering, or related field.
Strong understanding of authentication, authorization, MFA, RBAC, and privileged access concepts.
- GCIA / GCED / GCEDR / GCIH
- SANS Blue Team certifications
We are actively seeking to fill this role as it is a current vacancy.
About 407 ETR
Highway 407 ETR is an all-electronic open-access toll highway located in the Greater Toronto Area in Ontario, Canada. The highway spans 108 kilometres from Burlington in the west to Pickering in the east.
407 International Inc. is the sole shareholder of 407 ETR and is owned by:
Cintra Global S.E., a subsidiary of Ferrovial S.A. (48.29%)
Canada Pension Plan Investment Board (CPP Investments) and other institutional investors with non-controlling interests (44.20%)
Public Sector Pension Investment Board (PSP Investments) (7.51%)
Learn more at 407etr.com
Note: At 407 ETR, we are committed to fostering a diverse, equitable, and inclusive work environment. We value the unique perspectives and backgrounds of all individuals, and we firmly believe that our individual differences make us stronger as a whole.
Our commitment to inclusion extends beyond recruitment and encompasses an inclusive workplace culture through raising awareness, ongoing training, and encouraging feedback. We aim to create a safe and supportive environment where all employees can thrive.
Accommodation for disabilities or other grounds protected by human rights legislation are available upon request for candidates taking part in all aspects of the employment selection process.
