Senior Security Analyst (Cybersecurity)

Location: Remote-first; any location in Canada

Salary: CAD 118,600–163,075 per year in Alberta, British Columbia, and Ontario; CAD 106,700–146,763 per year in other Canadian locations

Company

hirify.global provides active cyber insurance combined with cybersecurity tools to help businesses prevent and manage digital risk.

What you will do

• Review and analyze the security posture of insured and prospective customers.
• Evaluate security programs, technologies, controls, and business environments, then recommend prioritized improvements.
• Investigate cyber insurance claims, security incidents, attack paths, and root causes to identify ways to detect and mitigate exposures.
• Track emerging threats, vulnerabilities, security practices, regulations, and industry standards.
• Develop security insights, detection tradecraft, playbooks, and product capabilities based on real-world attacks.
• Collaborate with underwriting, claims, product, and engineering teams to translate security analysis into scalable risk solutions.

Requirements

• 2–4 years of hands-on experience in security analysis, defensive security operations, and/or penetration testing.
• Strong understanding of network threats, attack vectors, exploitation methods, and intrusion-set TTPs.
• Strong knowledge of TCP/IP, network analysis, log analysis, and network-traffic capture.
• Experience with vulnerability assessment or offensive security tools such as Nmap, Nessus, Qualys, Burp Suite, Kali Linux, or Metasploit.
• Working knowledge of NIST CSF, ISO 27001, HIPAA, PCI DSS, or comparable security and risk frameworks.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience; clear communication skills are required.

Nice to have

• Experience securing cloud platforms such as Microsoft Azure or Amazon Web Services and hardening Windows, Linux, or Unix systems.
• Familiarity with forensic, log, and network analysis tools including EnCase, FTK, SIFT, Volatility, Splunk, Graylog, ELK/Logstash, Wireshark, or Zeek.
• Programming or scripting experience with Python, PowerShell, or Bash.
• Experience with SCADA/ICS networks, cyber insurance, risk quantification, underwriting, or claims.

Culture & Benefits

• Remote-first work environment with an inclusive, collaborative culture.
• 100% medical, dental, and vision coverage.
• Flexible paid time off.
• Annual home-office stipend and WeWork access.
• Mental and physical health wellness programs, including Headspace and Lumino.

Hiring process

• AI-assisted tools may help organize and review applications, while final hiring and interview decisions are made by the human recruiting team.
• Interviewed candidates receive an application status update within 45 days of the final interview.