CIHR is looking for a Security Operations Center Analyst

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

CIHR’s office is located in Ottawa, Ontario; however, employees are currently working within a flexible work arrangement pending the move to a newly updated, centrally located office in September 2025. At the new workplace, CIHR has adopted a hybrid work model and will follow the Direction on Prescribed Presence in the Workplace. Hiring managers will provide further details to candidates as applicable.

​You must provide a curriculum vitae outlining previous professional experiences. Additionally, when you apply, you will be asked a series of screening questions based on the education and experience criteria below.

​The position is classified at the GR-09 level which is equivalent to an IT-02. We may consider substantive IT-02 applicants ahead of all others.

Duties

​​​The Security Operations Center Analyst plays a critical role in safeguarding the organization's IT infrastructure. This position is responsible for continuous monitoring of security events, conducting in-depth investigations of security incidents, and implementing effective mitigation strategies.

​The Analyst will leverage technical expertise to conduct research, participate in forensic analysis, and provide guidance to clients on adhering to established IT security best practices, standards and policies.

MAIN RESPONSIBILITIES
• Monitor, review, analyze and propose mitigation actions for Canadian Centre for Cyber Security (CCCS) alerts.
• Monitor, review, analyze and propose mitigation actions for CIHR’s network infrastructure and endpoint devices.
• ​Assist in implementing mitigation actions and report on results.
• ​Respond to ServiceDesk requests assigned to IT Security.
• ​Provide subject matter expert advice to all CIHR staff.
​• Investigate and respond to quarantined emails.
• ​Manage the IT security mailbox, investigate, and respond to reported MS Defender and phishing alerts.
• ​Complete an incident report for all incidents.
• ​Develop phishing simulation scenarios and provide follow up awareness and contribute to Security Awareness Activities.
• ​Respond to Travel Security requests and complete related risk assessments.

Work environment

WHO ARE WE?

The Canadian Institutes of Health Research is a federal government agency that provides funding to support the work of thousands of health researchers. CIHR's mission is to support a healthier Canada by leading investment in innovative and collaborative research and helping to solve our health care challenges today and in the future. Composed of 13 Institutes, CIHR provides leadership and support to more than 13,000 health researchers and trainees across Canada. Are you looking for new challenges in a dynamic team? Are you looking for an environment where your expertise is recognized and heard?

If you answered yes to the above, then come join our team!

WHY WORK AT CIHR?

CIHR is dedicated to creating a healthy and stimulating work environment. People are the foundation of our organization. As a member of a CIHR team, you will become part of a diverse community where teamwork and the sharing of ideas amplifies our effectiveness. In addition to a dynamic environment where your work is valued by senior management, CIHR offers excellent conditions that set the agency apart from other employers. For instance, employees enjoy:

• Competitive salary scale: bilingual bonuses and performance pay
• Progressive work environment
• Hybrid Work Model
• Seamless transition for public servants
• A great work-life balance

As a Government of Canada Agency, CIHR employees are considered public servants and receive the same pension and benefits as the core public administration.

The CIHR is a separate agency of the Government of Canada, which allows us to establish human resources policies and programs that meet our specific needs. We encourage existing public servants to contact the email address below for questions related to transferring to a separate agency.

Intent of the process

The intent of this process is to staff 1 position for a 12-month term with the possibility of extension. A pool of pre-qualified candidates may be established to staff future identical or similar positions within CIHR with various tenures (assignment, specified period or indeterminate), various security clearance levels and/or various bilingual linguistic profiles.

Positions to be filled: 1

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

EDUCATION

Graduation from a post-secondary institution with a specialization in Information Technology, Security or any other field relevant to the work to be performed or an acceptable combination of education, training and/or experience.

Degree equivalency

EXPERIENCE

• Experience monitoring and analyzing cyber security events*
• Experience collecting and analyzing data for investigations support*
• Experience investigating cyber security events and troubleshooting security issues*
• Experience providing client service*

*To ensure your application is considered, please clearly demonstrate direct, hands-on experience for each qualification.
• Focus on experience where you had direct responsibility and performed tasks yourself, rather than instances where you only participated peripherally
• Only experience gained from real-world, professional work setting will be considered. While academic or personal projects are valuable, they won’t be considered for qualification purposes in this context
• ​Ensure you describe your specific contributions and outcomes clearly. Applications that lack this level of detail may not be assessed further.

If you possess any of the following, your application must also clearly explain how you meet it (other qualifications)

EDUCATION

• Professional certifications in cyber security, including but not limited to:
- Microsoft Certified: Security Operations Analyst Associate

Degree equivalency

EXPERIENCE

• Experience acquired in the context of the Government of Canada (GC). This includes:
- Direct employment within a GC department, agency, or Crown corporation;
- Private sector or consulting roles where services were provided directly to a GC organization.
• ​Experience utilizing security technologies (SIEM, XDR, IDS/IPS, VA scanner). Include specific technologies in the response (e.g. Microsoft Sentinel, Microsoft Defender, Tenable Security Center);
• Experience working in a security environment;
• Experience relevant to each of the essential and asset qualifications acquired within the last 2 years.

KNOWLEDGE

• HTML and CSS
• Knowledge of KQL language

The following will be applied / assessed at a later date (essential for the job)

Bilingual - Imperative (BBB/BBB)

Information on language requirements

​​KNOWLEDGE

• ​Knowledge of cyber security tools and technologies;
• ​Knowledge of security operations and intelligence analysis (defined as monitoring and analyzing security data, conducting research, and preparing reports);
• ​Knowledge of risks to both physical and information security in the context of employee travel.

COMPETENCIES

• Adaptability
• Critical Thinking
• Judgement
• Working with others (Collaborating and Relationship Management)
• Planning and Organizing
• Communication (Oral and Written)

Conditions of employment

Secret security clearance

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

1) The CIHR is committed to having a skilled and diversified workforce representative of the population it serves. In an effort to improve representation in the executive ranks to reflect Canada’s diversity, preference may be given to candidates who, at the time of application, indicate that they are belonging to one of the following Employment Equity groups (self-declaration): Indigenous peoples, Women, Visible Minorities and Persons with Disabilities.

2) The application method selected for this hiring process will be through online-applications submitted via the GC Jobs site. To submit an application on-line, please select the button "Apply Online" below.

3) We would like to thank all candidates who apply. Only those selected for assessment will be contacted. We will communicate with you regarding this process by email. Applicants should use an email address that accepts messages from unknown senders (some email systems block such messages). If you do not respond to our communications, we will interpret this as your withdrawal from the process.

4) From amongst those candidates that meet the essential criteria of education and experiences; CIHR may select a certain number of candidates that most closely meet the position requirements to participate in the next selection phase.

5) For questions, please contact hrstaffing-rhdotation@cihr-irsc.gc.ca.

We thank all those who apply. Only those selected for further consideration will be contacted.

Contact information

Apply online