Cybersecurity Analyst

Cybersecurity Analyst

Administration Offices Full-time
Information Technology Department
35 hours per week
Effective ASAP

Job Summary:
The Cybersecurity Analyst plays a key role in protecting and supporting the organization’s cybersecurity environment across identity, endpoints, servers, networks, vulnerability management, and security awareness. Reporting to the Network and Security Support Manager, this hands-on role investigates security events, supports incident response, and the organization’s cybersecurity technologies. It’s an excellent opportunity for IT professionals with Microsoft systems administration experience who are ready to grow their career in cybersecurity.

Duties and Responsibilities:
• Maintain, support, and enhance Microsoft Defender and Purview security solutions, including Identity, Endpoint, Server, Microsoft 365, and Data Loss Prevention (DLP).
• Support and secure Active Directory, Microsoft Entra ID, MFA, Conditional Access, privileged access, and identity governance controls.
• Support Privileged Access Management (PAM) and Zero Trust Network Access (ZTNA) platforms, including onboarding, access reviews, policy management, and troubleshooting.
• Support firewall and network security policy reviews, and continuous improvement initiatives.
• Monitor, triage, and investigate security alerts and suspicious activities across endpoints, identities, servers, cloud services, and networks.
• Respond to cybersecurity incidents, support containment, recovery, and remediation efforts.
• Maintain and improve logging, monitoring, and alerting platforms, including detection rules, dashboards, and workflows.
• Automate security operational and reporting processes using PowerShell, Microsoft Graph API, Python, Ansible and similar tools.
• Identify vulnerabilities, prioritize remediation efforts, and collaborate with IT teams to implement security hardening and risk reduction measures.
• Support cybersecurity awareness initiatives, phishing simulations, security exercises, security related ticket resolution, and vendor coordination.
• Develop and maintain documentation, runbooks, configuration standards, metrics, and reports.
• Research, and enhance cybersecurity technologies, controls, and operational processes.
Required Experience, Skills and Abilities:
• College Diploma in a technology subject area.
• Minimum five years of enterprise IT experience, including two years administering Microsoft Entra ID, Active Directory, Intune, or Microsoft 365.
• Strong scripting and automation skills using PowerShell, Microsoft Graph API, and KQL.
• Hands-on experience with Microsoft Entra ID, including Conditional Access, and RBAC.
• Experience configuring Microsoft Defender XDR, including Defender for Endpoint, Server, Identity, and M365.
• Experience creating and maintaining group policy, delegated and group managed service accounts in Microsoft Active Directory.
• Knowledge of network security principles, including firewalls, network segmentation, monitoring tools, and OSI model fundamentals.
• Excellent communication, documentation, and collaboration skills, with the ability to work effectively across technical and non-technical teams.
• Adaptability and a continuous learning mindset to keep up with evolving cyber threats, tools, and technologies.
• Ability to manage multiple priorities, meet deadlines, and work independently in a fast-paced environment.
Ability to foster a positive, respectful, and healthy work environment that promotes team collaboration and wellbeing.
• Required to complete and maintain position-related training and certifications within established timelines and throughout the duration of employment

Preferred Knowledge and Experience:
• Relevant certifications such as SC-200, SC-300, AZ-500, CCSP or CCOA.
• Experience investigating security incidents, analyzing alerts, and performing threat hunting in enterprise environments.
• Experience with vulnerability management or security awareness programs.
• Experience supporting Privileged Access Management (PAM) and Zero Trust Network Access (ZTNA) solutions in an enterprise environment.
• Experience implementing and maintaining CIS Benchmark configuration across asset groups.
• Familiarity with NIST CSF, CIS Controls, ISO 27001, or other security frameworks.

Physical Demands and Working Conditions:

Physical demands:
• Sitting or standing for extended periods of time
• Hand-held telephone receiver may require repetitive arm-stretching and elbow-bending action
• Extensive use of computer mouse and keyboard
• Prolonged periods of viewing computer monitor
• Lifting and carrying up to 20 lbs. may be required

Working conditions:
• Exposure to noise and frequent interruptions with conflicting demands and deadlines

Confidentiality
Demonstrated professionalism and respect for privacy in dealing with sensitive and confidential organizational, employee and student data and information.

Condition of Employment:
Criminal Record Check (Including Vulnerable Sector Check): Must provide a clear and current Criminal Record Check with Vulnerable Sector Screening prior to starting employment.

Child Abuse Registry Check: Must provide a clear Manitoba Child Abuse Registry Check prior to employment.

The above statements reflect the general duties considered necessary to describe the principal functions of the position identified and shall not be construed as a detailed description of all work requirements that may be inherent to the position.

Deadline for applications: Monday, November 9, 2026 – 2:00 p.m.
Rate of Pay: $72,801 - $84,952 per annum

External candidates must apply online through Job Connect.
Please visit our website at www.retsd.mb.ca - Careers 
Internal candidates must apply online through Employee Connect > Job Tab.
Mail or Email applications will not be accepted.

Candidates are responsible for providing a clear and accurate resume that demonstrates how they meet the qualifications outlined in the job posting.

Please note that an employee is not permitted to hold two or more positions in River East Transcona School Division that combine to equal more than 1.0 FTE.

We thank all applicants, however only those selected for an interview will be contacted.