Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Security Analyst II role.

Rezi rewrites your resume against CI Financial's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Security Analyst II posting at CI Financial — free, in seconds.

About the Role

The Security Analyst II (Senior Security Specialist) is a senior hands-on security professional responsible for identifying, assessing, and remediating enterprise security risk. The role leads complex operational security activities across detection and response, vulnerability management, application security, cloud and infrastructure security, security technology, governance, and advisory services. The incumbent works independently, coordinates cross-functional remediation, communicates risk to technical and business stakeholders, and contributes to the continuous improvement of CI’s cybersecurity program.

Responsibilities

Deploy, integrate, configure and enhance security solutions in accordance with approved architecture, change management and operating procedures.
Monitor security platforms for appropriate operation, data quality, coverage, performance and control effectiveness.
Lead technical troubleshooting and coordinate with internal teams and vendors to resolve security technology issues.
Evaluate security capabilities and recommend enhancements that measurably reduce risk, improve detection or increase operational efficiency.
Develop scripts, queries, automation or repeatable workflows to improve analysis, reporting and response.
Lead application security scanning activities across SAST, DAST, IaC, SAC, API testing and support teams in interpreting findings and selecting remediation approaches.
Partner with application owners and developers to embed security requirements into delivery processes and resolve material findings.
Provide security guidance through the system development lifecycle, including architecture design review, threat modelling, secure design and security testing.
Review cloud applications, configurations, identity controls, data flows and logging to identify security risk and required safeguards.
Investigate and triage complex security alerts and suspected compromises; determine scope, impact and required containment actions.
Lead or coordinate incident response activities, including investigation, containment, eradication, recovery, evidence preservation, documentation and lessons learned.
Improve detection coverage by identifying telemetry gaps, refining use cases and validating alert effectiveness.
Perform proactive threat hunting using endpoints, network, identity, cloud and SIEM telemetry to identify advanced or previously undetected threats.
Analyse threat intelligence and security advisories to determine relevance to CI and recommend defensive actions.
Participate in the after-hours on-call rotation and support high-severity incidents as required.
Lead infrastructure vulnerability management activities, including scan coverage, validation, prioritisation, exception handling, remediation tracking and reporting.
Partner with infrastructure, application and platform teams to drive risk-based remediation of vulnerabilities and security misconfigurations.
Assess exploitability, asset criticality, threat intelligence and business impact to establish remediation priorities.
Monitor emerging and actively exploited vulnerabilities, coordinate rapid exposure assessment and recommend compensating controls where immediate remediation is not possible.
Identify recurring control gaps and recommend sustainable process or technology improvements.
Advise business and technology projects on security requirements, control design, risk treatment and compliance with CI policies and standards.
Conduct structured security and threat risk assessments; document findings, risk rationale, mitigation recommendations and residual risk.
Assess new technologies and services for security risk and document clear, actionable requirements.
Maintain clear risk records and track agreed remediation actions to closure or formally approved acceptance.
Contribute to security policies, standards, baselines, procedures, playbooks and control documentation.
Support audits, regulatory reviews, client due diligence and security assessments by providing accurate control evidence and subject-matter expertise.
Present security findings and recommendations in language appropriate for technical teams, business leaders and executive stakeholders.
Recommend risk treatment and control improvements; formal business, risk acceptance and production-change approvals remain subject to CI governance.
Lead defined workstreams and coordinate activities across Security, Infrastructure, Application, Cloud, Architecture, Risk, Privacy, Legal and vendor teams.
Provide technical guidance, peer review and knowledge transfer to analysts and technology partners.
Exercise sound judgement, escalate material risk promptly and maintain clear ownership through to resolution.
Stay current on emerging threats, attack techniques, security technologies, regulatory expectations and industry practices.
Perform other related duties as assigned.

Requirements

Five or more years of progressive, hands-on experience in information security, cybersecurity operations, security engineering, risk assessment or a related discipline.
Demonstrated experience leading complex security investigations or incident response activities.
Demonstrated experience with vulnerability management and remediation across enterprise infrastructure.
Experience with application security testing and remediation, including SAST and DAST.
Experience advising technology or business initiatives on security architecture, controls and risk treatment.
Experience producing clear security assessments, risk records, technical documentation and executive-ready communications.
Security monitoring and incident response using endpoint detection and response, SIEM and network security telemetry; experience with platforms such as CrowdStrike, ExtraHop, Darktrace and Splunk is an asset.
Vulnerability assessment and remediation using platforms such as Qualys or Tenable.
Application security SAST,DAST,SCA, IaC and API testing using platforms such as Checkmarx , Veracod, Snyk.
Cloud security concepts and controls in Microsoft Azure and Amazon Web Services (AWS).
Identity and access management, including SSO, MFA, Microsoft Entra ID, Okta, Duo and privileged access management solutions such as CyberArk, One Identity Safeguard, BeyondTrust.
Network security concepts, including TCP/IP, OSI, segmentation, NAC, 802.1X, ISE, SSE and Zero Trust.
CIS Security standards for hardening of Windows workstations, MACs, Mobile phones, Windows Server and Linux environments.
Security frameworks and methods such as NIST Cybersecurity Framework, NIST Risk Management Framework, ISO/IEC 27001, MITRE ATT&CK and recognized threat-modelling approaches.
Scripting, query languages or automation using PowerShell, Python, shell or equivalent technologies.
Post secondary education in information security or equivalent and relevant work experience.
CISSP or comparable industry certification.
AWS Certified Security - Specialty, or equivalent cloud security credential is an asset.
Professional office and hybrid work environment, in accordance with CI workplace requirements.
After-hours work and participation in an on-call rotation may be required.
Work may involve time-sensitive response to security incidents and coordination across multiple teams and service providers.

Skills

Security Engineering
Security Technology
Application Security
Cloud Security
Security Monitoring
Threat Hunting
Incident Response
Vulnerability Management
Risk Advisory
Governance
SAST
DAST
IaC
SAC
API Testing
Microsoft Azure
Amazon Web Services (AWS)
Identity and Access Management
SSO
MFA
Microsoft Entra ID
Okta
Duo
CyberArk
One Identity Safeguard
BeyondTrust
TCP/IP
OSI
Segmentation
NAC
802.1X
ISE
SSE
Zero Trust
CIS Security standards
NIST Cybersecurity Framework
NIST Risk Management Framework
ISO/IEC 27001
MITRE ATT&CK
Threat Modelling
PowerShell
Python
Shell scripting

Location

Hybrid

Work Type

Hybrid
Full-time

Experience Level

Senior
Five or more years of experience

Education Level

Post secondary education in information security or equivalent
CISSP or comparable industry certification
AWS Certified Security - Specialty, or equivalent cloud security credential

Salary/Compensations

$69,500 to $119,500

Benefits

Participation in a bonus program
Health insurance coverage
Wellness programs
Life and disability insurance
Retirement savings plans
Paid leave programs
Education-related programs
Paid holidays
Vacation time
Modern HQ location within walking distance from Union Station
Training Reimbursement
Paid Professional Designations
Employee Savings Plan (ESP)
Corporate Discount Program
Enhanced group benefits
Parental Leave Top–up program
Paid time off for Volunteering

About the Company

CI Financial is an independent company offering global wealth management and asset services through diverse financial services firms.
Since 1965, we have consistently anticipated and responded to the changing needs of investors.
We are driven by a commitment to provide individuals and institutions with the highest-quality investments and advice.
Our commitment to the highest levels of performance means that whatever their position, CI employees must be comfortable in a fast-paced environment that will stretch them to tap into their highest potential.
Employees with a healthy dose of ambition, a desire to commit to a curious mindset for continuous learning, and a willingness to go the extra mile thrive at CI.
We offer an in-office environment, competitive benefits, and a supportive workplace to help our employees thrive both personally and professionally.

Equal Opportunity

We are focused on building a diverse and inclusive workforce.
If you are excited about this role and are not confident you meet all the qualification requirements, we encourage you to apply to investigate the opportunity further.
CI Financial Corp. and all of our affiliates (“CI”) are committed to fair and accessible employment practices and provide reasonable accommodations for persons with disabilities.
If you require accommodations in order to apply for any job opportunities, require this posting in an additional format, or require accommodation at any stage of the recruitment process please contact us at accessible.recruitment@ci.com, or call 416-364-1145 ext. 4747.