General Position Summary: Firm Information Technology Services – Senior Cyber Security Analyst Make an impact with out Technology.As a key team member of the Cyber Security team the Senior Cyber Security Analyst. This diverse team of tech-savvy problem solvers embraces digital transformation and the possibilities technology brings to the future of our industry. As a trusted advisor, you’ll support, utilize and maintain MNP’s technology to ensure smooth IT operations, enabling team members to work efficiently and effectively. MNP’s Cyber Security Team provides round the clock vigilance to MNP’s environment. The team not only monitor threats and prevents them but also performs proactive drills to anticipate and mitigate all new and emerging forms of threats. Our team members are committed to continuous learning and stay updated on the latest trends in cyber threats and security. Being a 24/7 service to MNP our team members are expected to work in shifts. National in scope and local in focus, MNP is one of Canada’s largest professional service firms providing client-focused accounting, consulting, tax, and digital services to clients. Founded in 1958, MNP today is a CAD 2 billion+ organization with 9600+ employees and 154 offices across Canada. MNP prides itself on being an ‘advisor’ to its clients(individuals, businesses, and organizations), focusing on their success by delivering personalized strategies and solutions that help clients reach their full potential — wherever business takes them. MNP set up MNP SPARK its GCC in Bangalore in May 2025 with a focus on enabling the firm drive growth, efficiency, customer delight and innovation, by leveraging high quality talent in India. MNP Spark is like any other MNP region/office - front facing, client focused but working with all of MNP regions in Canada to deliver services Responsibilities: Threat Detection & Response: Monitor and analyze security events from various sources, including SIEM/XDR platforms like Microsoft Sentinel and Rapid7 InsightIDR Conduct thorough investigations of security incidents, including root cause analysis and forensic investigations Collaborate with the Incident Response Team to triage, classify, and escalate alerts as necessary Maintain and update incident response runbooks and playbooks aligned with NIST and MITRE ATT&CK frameworks Tool & Platform Management: Administer and optimize security tools such as Microsoft Defender, Zscaler ZIA/ZPA, CyberArk EPM, and Rapid7 InsightVM Ensure Azure workloads are monitored and secured using Microsoft Defender for Cloud, Azure Policies, and Sentinel analytics rules Utilize Python scripting to automate detection workflows, playbook execution, and integration between tools and APIs Vulnerability & Attack Surface Management: Conduct regular vulnerability assessments using Rapid7 InsightVM and ensure timely risk-based patching and mitigation Continuously assess the organization’s attack surface across endpoints, networks, and cloud infrastructure Recommend and implement hardening strategies, privilege controls, and segmentation to reduce risk Security Controls Coverage: Ensure comprehensive coverage of security controls across all environments, including endpoints, networks, and cloud infrastructure Regularly review and update security controls to address emerging threats and vulnerabilities Cybersecurity Metrics & Reporting: Define and track key cyber security metrics (i.e., Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), incident severity distribution, alert-to-incident ratio, and vulnerability remediation timelines) Requirements Qualification Skills: · In-depth experience with Microsoft Defender, Zscaler, CyberArk EPM, Rapid7 InsightIDR/InsightVM, Microsoft Sentinel, Azure Security Center, and Zscaler ZIA · Strong scripting skills in Python for automation and log enrichment · In-depth knowledge of incident response frameworks (e.g., NIST 800-61), SOC operations, and threat intelligence · Excellent analytical and problem-solving skills · Ability to convey technical risk to non-technical stakeholders Educational Qualifications: · Bachelor Or Master in Technology · Bachelor Or Master of Computer Applications Certifications: Certifications such as CISSP, GCIH, GCIA, AZ-500, or equivalent are considered an asset Experience: 4 to 6 years of experience in cybersecurity operations, with a focus on threat detection and response
