Information Technology - Senior Engineer, Threat & Vulnerability

Conduct regular security assessments and vulnerability scans to identify and mitigate risks.,Design and implement security measures to protect network infrastructure and assets.,Monitor security events and analyze security logs to detect and respond to potential security incidents.,Identify, analyze, and prioritize threats to Aritzia's technology environment, including databases, systems, applications, networks.,Develop and implement threat intelligence programs in anticipation of emerging security incidents.,Collaborate with Technology and cross-functional partners to share and receive threat information.,Lead the response to security incidents, including investigation, containment, response, and recovery.,Develop and implement playbooks and response plans to ensure a structured and efficient response to security incidents.,Deploy and support security tools, technologies, and controls that protect Aritzia's infrastructure and data.

Proficiency in Microsoft security suite of products, including MS Defender and Sentinel.,Proficiency in Kusto Query Language (KQL).,Knowledge of security incident investigation techniques.,Knowledge of Microsoft, Linux, and Mac operating systems.,Knowledge of Zscaler products.,Knowledge of vulnerability scanning tools.,Knowledge of Azure and GCP cloud infrastructure.,Knowledge of SIEM products.,Familiarity with MITRE ATT&CK framework.,Exposure to web application and/or network penetration testing.,Microsoft: Security Operations Analysts Associate – SC-200 certification preferred.,MS: Azure Security Engineer Associate – AZ-500 certification preferred.,Offensive Security: OSCP, SOC-200 certification preferred.,SANS: GIAC – Incident Handler certification preferred.