Senior Cyber Security Analyst

Position Overview

Power your future with Qualus in our Information Technology department as a Senior Cyber Security Analyst. Cyber Analyst is a vital member of the Qualus IT Security & Compliance team and plays an important role in protecting the organization’s systems, networks, data, and emerging technology platforms through proactive monitoring, detection, and response to cybersecurity threats.

This role requires expertise in enterprise security operations, threat analysis, and governance of modern technology ecosystems, including AI-enabled solutions, ensuring the protection of sensitive data and the resilience of business operations.

The Cyber Analyst will be responsible for monitoring and analyzing security events across Qualus’ layered security architecture, including endpoint, network, email, data protection, and AI-enabled systems and services.

Additionally, the Cyber Analyst will support the secure adoption and governance of Artificial Intelligence (AI) solutions across Qualus, ensuring appropriate controls, data protections, and compliance requirements are enforced.

A security first mindset, strong analytical skills, and the ability to assess risk across both traditional IT systems and AI driven technologies are critical to success in this role.

This position may require after hours support as determined by the needs of the business, including participation in incident response activities.

Responsibilities

• Monitor, triage, and investigate alerts across endpoint, identity, email, network, cloud, SIEM/EDR, AI-enabled systems, and data protection platforms.
• Correlate security events across Qualus enterprise security stack, including CrowdStrike Falcon Complete, Microsoft Defender, Abnormal Security, Zscaler Z4U, Meraki, Microsoft Purview, Tenable Nessus, and Falcon Next-Gen SIEM/logging platforms.
• Support incident response activities, including alert validation, containment coordination, evidence collection, root cause analysis, corrective action tracking, and post-incident documentation.
• Support Microsoft security and compliance platforms, including Microsoft Defender, Microsoft Purview, data classification, sensitivity labeling, DLP, retention, audit, and eDiscovery-related activities.
• Perform vulnerability management activities using Tenable Nessus and CrowdStrike related processes, including validation, risk prioritization, remediation coordination, exception tracking, and reporting.
• Support SIEM/EDR detection engineering, alert tuning, investigation workflows, and security playbook development.
• Assist with enforcement of Zero Trust principles, including conditional access, identity-based controls, Federated Authentication (SSO), MFA, RBAC, least privilege, and device posture validation.

• Review and support cybersecurity policies, standards, and procedures related to access control, acceptable use, data protection, AI governance, vulnerability management, incident response, and vendor risk management.
• Support security assessments for SaaS platforms, cloud services, vendors, and AI-enabled tools to identify risks.
• Assist with audit evidence collection, customer security questionnaires, control validation, and compliance documentation aligned with SOC 2, NIST 800-171, ISO 27001, ISO 42001, and other applicable requirements.
• Stay current on threat trends, AI security risks, Microsoft security capabilities, data protection practices, and security operations best practices.
• Provide guidance and knowledge sharing to team members and stakeholders as needed.
• Other duties as assigned.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent professional experience.
• 5 to 8+ years of experience in cybersecurity, security operations, incident response, security engineering, IT risk, or related roles.
• Hands-on experience with EDR, SIEM, email security, vulnerability management, Microsoft security tools, and data protection platforms.
• Experience investigating security alerts, documenting findings, and supporting incident response activities.
• Working knowledge of Microsoft Defender, Microsoft Purview, Microsoft 365 security, identity security, data classification, DLP, and audit/eDiscovery concepts.
• Experience with CrowdStrike Falcon, Abnormal Security, Zscaler, Tenable Nessus, Meraki, and Falcon Next Gen SIEM/logging platforms.
• Familiarity with Zero Trust, least privilege, RBAC, conditional access, MFA, and device posture concepts.
• Understanding of cybersecurity frameworks and compliance expectations, including NIST 800-171, SOC 2, ISO 27001, ISO 42001, and audit evidence practices.
• Ability to communicate technical findings clearly to IT, business, audit, and leadership stakeholders.

#LI-MM01

Benefits & Compensation

Qualus offers a competitive benefits package for eligible employees, which may include Medical, Dental, Vision, Life Insurance, Short- and Long-Term Disability coverage, Retirement Savings Plans (including employer matching where applicable), Flexible Spending and/or Health Spending Accounts, Employee Assistance Programs (EAP), Parental Leave, Paid Time Off, and Company Holidays. Benefits offerings may vary based on position, work location, and eligibility requirements. The compensation range for this position is provided in accordance with applicable laws and market practices. The final base salary offered may vary based on factors including, but not limited to, education, qualifications, certifications, experience, skills, seniority, geographic location, internal equity, performance, and business needs. Compensation ranges are subject to change at the Company's discretion and as permitted by applicable law.

Company Overview

Qualus is a leading pure-play power solutions firm and innovator at the forefront of power infrastructure transformation, with differentiated capabilities across grid modernization, resiliency, security, and sustainability. The firm partners with utilities, commercial, industrial, data center, and government clients, and renewable and energy storage developers, offering comprehensive solutions through boutique and integrated advisory, planning, engineering, digital solutions, program management, energy efficiency and specialized field services. Qualus also provides software and technology enabled services and develops breakthrough solutions for critical power industry challenges such as distributed and variable resource integration, emergency management, and secure data exchange. The firm has over 2,000 professionals, with offices throughout the U.S. and Canada.

Equal Opportunity Employer

We are an equal opportunity employer and value diversity. We are committed to providing an inclusive workplace and do not discriminate on any grounds protected by applicable human rights legislation across Canada and the US.

We are committed to a secure and transparent hiring process. We do not request payment or sensitive personal information, such as Social Security numbers or banking details, during the application process. Please use caution and verify opportunities through our official channels.