Cybersecurity Analyst

Join Our Growing Team!

Discovery Silver Corp. has an exciting opportunity for a Cybersecurity Analyst.

A growing North America Precious Metals Company, Discovery is committed to combining high-quality gold producing assets in Canada with the world’s largest undeveloped silver deposit in Mexico.

Discovery has an experienced team, dedicated to being a highly profitable producer of gold and silver that generates superior returns, delivers substantial social-economic benefits and meets the highest environmental standards.

The Cybersecurity Analyst will be a key member of a rapidly maturing cybersecurity function within the IT department. Reporting directly to the Manager of Cybersecurity & AI, the Cybersecurity Analyst will support core security operations, strengthen Discovery’s security posture across corporate and site environments, and contribute to the implementation of Discovery’s cybersecurity program.

This role is hands‑on and operational, focusing on security monitoring, endpoint security, identity and access control, vulnerability management, incident response, and secure configuration of modern cloud and endpoint platforms. The Cybersecurity Analyst will play an active role in maturing Discovery’s security controls across both IT and OT environments.

• Perform day‑to‑day security monitoring using Microsoft Defender XDR, including endpoint, identity, email, and SaaS alert investigations;
• Support deployment and configuration of security baselines across Intune‑managed Windows and mobile devices; contribute to MECM‑based patch management activities;
• Assist in implementation and continuous improvement of Identity & Access Management controls within Entra , including Conditional Access, MFA configuration, and privileged access hygiene;
• Conduct vulnerability scans, analyze findings, prioritize remediation, and coordinate corrective actions with IT and OT teams;
• Participate in incident response activities, including initial triage, containment steps, evidence collection, documentation, and escalation as required;
• Maintain and improve security hardening standards across endpoints, servers, and cloud services;
• Monitor email hygiene controls (Defender for Office 365) and support phishing investigation workflows;
• Coordinate, execute, and monitor phishing and social engineering attack simulation campaigns using the Microsoft Defender portal, including campaign design, targeting, payload selection, and results analysis;
• Review and validate security logs, identify anomalies, and assist in integrating telemetry sources into Discovery’s emerging SOC processes and MSSP relationship;
• Support governance and compliance tasks, including documentation of procedures, incident reports, configuration baselines, and access reviews;
• Support OT security coordination, respecting operational constraints at mining sites;
• Provide input into cybersecurity projects, including Intune onboarding, baseline enforcement, vulnerability management enhancements, and identity lifecycle improvements;
• Participate in change control processes and ensure that security considerations are incorporated into IT operational activities;
• Collaborate effectively with Corporate IT, Operations, OT personnel, and external vendors;
• Keep up to date with technical and industry developments relevant to cybersecurity and modern endpoint/cloud security.

• Post‑secondary education with a diploma or degree in Computer Science, Information Security, or related field;
• 3–7 years of progressive experience in cybersecurity, security operations, endpoint security, or IT systems administration with a security focus;
• Strong working knowledge of Microsoft Sentinel, Microsoft Defender XDR, Intune, Entra , Purview, and related Microsoft 365 security technologies;
• Experience performing security investigations, vulnerability management, and incident response;
• Familiarity with patch management concepts (Intune/MECM) and secure configuration baselines;
• Understanding of network security principles, VPNs, Fortinet Forti Gate fundamentals, and DNS security concepts;
• Strong analytical, documentation, and communication skills;
• Ability to…