Information Security Analyst

About MEC

At MEC, we believe the transformative power of the outdoors makes us better humans and drives us to do good for the planet. We are here to inspire and support everyone in getting active outside, matching people with gear and advice that instills confidence. We offer more than products; we offer passion for the outdoors. We play with purpose!

MEC is an equal opportunity employer and committed to building an inclusive community of staffers. We’re proud to work with our people to create a diverse workplace, where everyone feels like they belong and has the opportunity to be successful. We welcome all applicants to join our diverse team. Tell us what you need during the hiring process, and we’ll do our best to accommodate you.

As an Information Security Analyst, your role will be to help protect MEC’s members, employees, and the company by responding to alerts, auditing compliance with Information Security policies, and assisting with the operation of MEC’s Information Security Management System.

Our Information Security team plays a key role in keeping the business running smoothly. The team responds to alerts, manages incidents, and supports organizational and internal security projects.

This is a 2‑week in‑office hybrid position at MEC's Support Office (HO) in Vancouver.

• Monitor, identify and validate security events generated from Information Security systems and tools, such as SIEM, anti‑virus, XDR, or events identified by organization staff
• Contribute to the development, implementation and tuning of SIEM use‑cases/detection rules and other security control configurations to enhance threat detection and defense capabilities
• Perform analysis of security event data to identify suspicious behaviour and potential threats
• Respond to critical business‑impacting situations and coordinate efforts required to engage the necessary resources to remediate the issue
• Escalate security alerts to events and notify the Information Security Team Lead
• Create, manage and distribute Information Security Awareness training to the organization
• Respond to Information Security alerts occurring after‑hours with a rotating after‑hours on‑call coverage
• Support MEC’s annual PCI Compliance requirements
• Provide guidance to staff members on how to identify Information Security events and incidents and usage of Information Security tools
• Manage and maintain security tools such as vulnerability management, anti‑virus, XDR, password manager, etc.
• Perform Third‑Party Risk assessments of vendors, tools and services
• Work with various department projects to provide Information Security guidance and include controls in the development process
• Participate in Information Security huddles, reporting on work done and current security event trends
• Work on additional tasks as assigned by the Information Security Team Lead or Director of Infrastructure and Information Security

• 1+ year experience in Information Security or related IT information security role
• Obtained or working towards a bachelor’s degree in information security or equivalent experience
• Obtained or working towards Information Security certifications such as from ISACA, SANS/GIAC, CompTIA, ISC2
• Ability to learn and adapt in a fast‑paced, collaborative team environment where knowledge, skills and ideas are openly shared with other IT professionals and departments
• High degree of initiative, dependability and ability to work with little supervision
• Excellent English written and verbal communication skills
• Strong interpersonal and collaborative skills with peers
• High level of personal integrity, with the ability to handle confidential and otherwise sensitive matters professionally and with the appropriate level of judgement and maturity
• Excellent diagnostic and problem‑solving skills
• Working knowledge of log management platforms such as a SIEM
• Strong understanding of networking technologies such as TCP/IP, DNS, DHCP, switches, NGFW
• Knowledge of security principles and trends in the security industry
• Knowledge of Windows, Windows Server, macOS and Linux Operating Systems
• Knowledge of Cloud…