Security Operations Analyst II

Summary

We are seeking a Security Operations Analyst II to join Bell’s Security Operations team, playing a critical role in protecting and supporting one of Canada’s largest telecommunications networks. This is a Level 3 (L3) security operations role responsible for leading the investigation, analysis, and resolution of complex security incidents, advanced threats, and escalated cybersecurity events across enterprise and customer environments. The successful candidate will possess strong hands-on experience with Palo Alto Networks security solutions and Cisco Identity Services Engine (ISE), leveraging these technologies to support threat detection, access control, incident response, and security monitoring activities. Working closely with internal teams and customers, you will provide senior-level technical expertise, drive incident remediation efforts, ensure compliance with contractual security requirements, and contribute to the continuous enhancement of security operations capabilities. This position requires deep knowledge of cybersecurity operations, security technologies, and forensic investigation practices, along with the ability to operate effectively in a fast-paced 24/7 environment while serving as a key contributor or lead within the Security Incident Response Team (SIRT).

Key Responsibilities

•    Manage the daily customer requests for changes to their security infrastructure.
•    Prepare changes for security devices such as firewalls, intrusion detection and prevention systems, identity access management, etc.
•    Participate in new client onboarding projects and services and prepare implementations.
•    Review and interpret security alerts and provide diagnostics in the management of incidents to support clients.
•    Depending on the nature of the security threat, assess and develop mitigation measures to ensure that appropriate treatment is applied, and customers are informed.
•    Take proactive measures to manage all perimeter security equipment or associated components that may be interrupted or affected due to threats or vulnerabilities.
•    Configure, install, manage, and maintain security devices and provide general information and recommendations on security best practices.
•    Develop documentation associated with maintenance releases and keep it updated.
•    Observe security management best practices.

Critical Qualifications

•    Completion of a University or College program in Computer Science; or 5 years of equivalent industry experience in the information systems field.
•    Demonstrated experience in the design, implementation, and troubleshooting of security solutions including authentication, authorization, encryption, and audit capabilities as part of an overall system design.
•    Recognized hands-on experience in the implementation, daily management, and troubleshooting of firewalls from multiple vendors.
•    Hands-on experience in maintaining and deploying SDWAN solutions.
•    Proven experience in the daily management and troubleshooting of intrusion detection and prevention systems (IPS).
•    Experience in troubleshooting security solutions including authentication capabilities, authorization, and encryption, as well as securing devices access.
•    Experience in translating complex and ambiguous problems into actionable items.
•    Ability to work with multiple clients and across multiple technologies.
•    Ability to work under pressure (required during incidents).
•    Good communication, writing, and presentation skills. Autonomous, with excellent organizational and interpersonal skills.
•    Excellent communication skills in French and English (written and spoken).

Preferred Qualifications

•    Hands-on security certifications from major vendors.
•    Experience working with the following security vendors: Palo Alto, Juniper, Cisco, Fortinet, Arcsight, Checkpoint, etc.
•    Knowledge of offensive and defensive security operational tactics.
•    Understanding of compliance frameworks such as NIST, ISO 27001, ITIL, SAS70 (or 5970) and/or others.
•    Knowledge of security information and event management (SIEM).