Sr. Cyber Security Analyst

A current and valid ISC2 Certified Information Systems Security Professional (CISSP) certification and active ISC2 membership. Proof of certification will be required.

A diploma or degree in Cyber Security, Information Technology, Computer Science or a related discipline, or an equivalent combination of education and practical experience.

Extensive experience in cyber security operations, including incident detection, escalation, investigation and response.

Strong experience with SIEM and security operations technologies, such as Microsoft Sentinel, and with SOC, MxDR, MSSP or other third-party security providers.

Hands-on experience with digital forensics, vulnerability management, security assessments, remediation tracking and formal risk documentation.

Strong technical knowledge of networking, operating systems, identity, endpoints, firewalls and core security principles.

Strong knowledge of on-premises and Microsoft Azure cloud infrastructure and related security controls.

Hands-on experience deploying, managing and optimizing Microsoft Defender technologies, including Microsoft Defender for Cloud, across cloud and hybrid environments.

Demonstrated ability to explain cyber risk clearly, influence practical action and communicate effectively with technical teams, business stakeholders and senior leaders.

Strong analytical, project management, documentation and reporting skills, with sound judgment when handling sensitive incidents and information.

Experience managing vendors, initiatives and multiple concurrent priorities.

Experience with cybersecurity governance, information protection, Microsoft Purview, eDiscovery or litigation investigation support. Experience with security technologies such as Zscaler, Quorum, Red Canary or Arctic Wolf. Experience conducting or supporting security assessments in operational technology environments, including industrial control systems, SCADA or other field-based technologies. Additional certifications in areas such as ethical hacking, incident handling, cloud security, threat intelligence or digital forensics.

Experience with security technologies such as Zscaler, Quorum, Red Canary or Arctic Wolf.

Experience conducting or supporting security assessments in operational technology environments, including industrial control systems, SCADA or other field-based technologies.

Additional certifications in areas such as ethical hacking, incident handling, cloud security, threat intelligence or digital forensics.

This is an office-based role requiring presence in Vermilion’s Calgary office five days per week.

Occasional flexibility outside regular business hours may be required to support Vermilion’s global operations, including meetings or activities involving teams in other countries and time zones.

Some international travel may be required. The successful candidate must be eligible to travel internationally for business purposes.

We care for each other, the environment and the company, and aim to enrich the communities in which we live and work

We embrace new solutions across the business, allow space for creativity, and invest in innovation and technology

We operate with honesty, transparency and fairness, and can be counted on to do what we say we will

We invest in our employees, providing meaningful work and opportunities for training and professional development

We have been focused on sustainability for more than a decade

We are focused on the future: responsibly producing the oil and natural gas that is essential to energy security while exploring alternative energy options

Vermilion is committed to diversity and inclusion, and aims to create a healthy, accessible and rewarding work environment that highlights our employees’ unique contributions to our company’s success. As an equal opportunity employer, we welcome all applications to help us build a diverse workforce that reflects the communities in which we live and work.