We are hiring a Senior Security Operations Analyst, Information Security!
Reporting To:
Manager, Security Operations
Full-Time/Part- Time:
Full-time
Posting Date:
November 13, 2026
Closing Date:
December 18, 2026
Salary Range:
$85,000 - $115,000
Hours of Work:
8:30 a.m. – 5:00 p.m.
Grade:
Office Location:
14.4
Toronto
Great location! Steps away from the main public transit station
What we offer:
Highly competitive compensation package which includes a base salary, bonus, benefits, and career advancement opportunities!
*Eligibility for benefits is dependent on the terms of employment
The Opportunity
Reporting to the Manager, Information Security and working closely with our Infrastructure team, the Senior Security Operations Analyst role is to ensure the operation of in-house security systems. This includes supporting audits, security operations reporting, engage with our Security Operations Centre vendor, and end point device security. This person will also analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion, and conduct device and user activity audits where required.
How you will contribute:
Security Operations
- Lead the operational oversight and optimization of SIEM, MDR, EDR, and endpoint protection platforms (preferably 4 + years of experience in Microsoft Suite, Sentinel, FIM, MDI, MDE).
- Develop and maintain advanced detection rules, analytics, runbooks and playbooks to proactively identify threats across hybrid environments.
- Collaborate with security architecture, GRC, and infrastructure teams to align operational security controls with enterprise risk management goals
- Serve as the primary contact with external Security Operations Center (SOC) vendors to monitor SLAs, optimize alerting mechanisms, and ensure timely triage.Take the lead in creating and presenting biweekly and quarterly security reports for senior leadership. This includes collecting data, analyzing trends, spotting risks, and suggesting actions to improve our security posture.
- Coordinate regular Red/Purple team activities and tabletop exercises with vendors and internal stakeholders
Incident Response & Forensics
- Lead cross-functional incident response efforts from detection through containment, eradication, and recovery.
- Provide expertise in technical forensics and post-incident root cause analysis to strengthen security defences.
- Maintain and refine the incident response plan, ensuring alignment with best practices and business continuity needs
Compliance & Governance
- Ensure all security operations activities align with relevant regulatory standards as per GRC guidance.
- Assist GRC and internal audit teams during security assessments and regulatory inspections.
Incident Management
- Work collaboratively with teams and support the IT Teams as part of the incident response from Detection till Recovery of systems.
- Support in technical forensic investigation analysis with vendor.
Skills and Attributes:
- Deep understanding of Microsoft security ecosystem (Sentinel, Defender for Endpoint, MDI, Defender for Identity.
- Expertise in building threat detection content, using KQL and other SIEM query languages.
- Demonstrated ability to lead complex incident response efforts.
- Experience in integrating threat intel feeds and leveraging automation tools such as Logic Apps or SOAR.
- Strong analytical and communication skills with the ability to present security posture to senior leadership.
- A working knowledge of ISO27001 and NIST-800 would be beneficial.
- Works well with others and supports team members to achieve common goals.
Key Contacts:
- External:Working with Security Operations Vendor, Forensics Team
- Internal: IT, Business users
Education/Certification/Experience Requirements:
- Bachelor's degree in Cybersecurity, Computer Science, or a related field.
- A minimum of 7+ years hands-on practical experience in IT security .
- Any of the following Certifications: CISSP, GCIA, GCIH, Azure Security Engineer, Microsoft SC-200 would beneficial.
Core Competencies Required for the Role:
- Advanced Threat Hunting
- Security Automation & Orchestration
- Cross-Functional Incident Leadership
- Regulatory & Policy Awareness
- Vendor Management & SLA Governance
Working Environment and Physical Demands Analysis:
- Office environment
- Periods of high volume with tight timelines
- Long periods of stationary position/sitting
- Prolonged periods of repetitive movement (i.e. using a keyboard and mouse)
- Long periods of time in viewing a computer screen
- Multi-tasking may include speaking to customers on a telephone call while looking up information on a computer program.
Why join First National?
- Competitive Compensation
- Comprehensive benefits program (i.e., Health Spending Account, Maternity and Parental Leave Top Up)
- Extensive training programs to set our employees up for success
- Modern office environment conducive to collaboration
- Supportive teamwork culture
- Opportunities to give back to the communities and work through events focused on a variety of charities
- Ongoing social events throughout the year
The team you’ll join:
Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through the mortgage broker channel and we are Canada’s largest commercial mortgage lender.
First National has been consistently recognized as a great place to work and we are proud that our employee engagement feedback is higher than our industry partners.
We would like to thank all applications for their interest in this existing vacancy, but only candidates selected for an interview will be contacted.
First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation and any other category protected by law.
First National supports requests for accommodation from applicants with disabilities; please contact Human Resources at [email protected] should you need an accommodation at any point in the recruitment process.
Artificial Intelligence is not used in our recruitment or hiring process for this role.
#FNLOON
We are hiring a Senior Security Operations Analyst, Information Security!
Reporting To:
Manager, Security Operations
Full-Time/Part- Time:
Full-time
Posting Date:
November 13, 2026
Closing Date:
December 18, 2026
Salary Range:
$85,000 - $115,000
Hours of Work:
8:30 a.m. – 5:00 p.m.
Grade:
Office Location:
14.4
Toronto
Great location! Steps away from the main public transit station
What we offer:
Highly competitive compensation package which includes a base salary, bonus, benefits, and career advancement opportunities!
*Eligibility for benefits is dependent on the terms of employment
The Opportunity
Reporting to the Manager, Information Security and working closely with our Infrastructure team, the Senior Security Operations Analyst role is to ensure the operation of in-house security systems. This includes supporting audits, security operations reporting, engage with our Security Operations Centre vendor, and end point device security. This person will also analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion, and conduct device and user activity audits where required.
How you will contribute:
Security Operations
- Lead the operational oversight and optimization of SIEM, MDR, EDR, and endpoint protection platforms (preferably 4 + years of experience in Microsoft Suite, Sentinel, FIM, MDI, MDE).
- Develop and maintain advanced detection rules, analytics, runbooks and playbooks to proactively identify threats across hybrid environments.
- Collaborate with security architecture, GRC, and infrastructure teams to align operational security controls with enterprise risk management goals
- Serve as the primary contact with external Security Operations Center (SOC) vendors to monitor SLAs, optimize alerting mechanisms, and ensure timely triage.Take the lead in creating and presenting biweekly and quarterly security reports for senior leadership. This includes collecting data, analyzing trends, spotting risks, and suggesting actions to improve our security posture.
- Coordinate regular Red/Purple team activities and tabletop exercises with vendors and internal stakeholders
Incident Response & Forensics
- Lead cross-functional incident response efforts from detection through containment, eradication, and recovery.
- Provide expertise in technical forensics and post-incident root cause analysis to strengthen security defences.
- Maintain and refine the incident response plan, ensuring alignment with best practices and business continuity needs
Compliance & Governance
- Ensure all security operations activities align with relevant regulatory standards as per GRC guidance.
- Assist GRC and internal audit teams during security assessments and regulatory inspections.
Incident Management
- Work collaboratively with teams and support the IT Teams as part of the incident response from Detection till Recovery of systems.
- Support in technical forensic investigation analysis with vendor.
Skills and Attributes:
- Deep understanding of Microsoft security ecosystem (Sentinel, Defender for Endpoint, MDI, Defender for Identity.
- Expertise in building threat detection content, using KQL and other SIEM query languages.
- Demonstrated ability to lead complex incident response efforts.
- Experience in integrating threat intel feeds and leveraging automation tools such as Logic Apps or SOAR.
- Strong analytical and communication skills with the ability to present security posture to senior leadership.
- A working knowledge of ISO27001 and NIST-800 would be beneficial.
- Works well with others and supports team members to achieve common goals.
Key Contacts:
- External:Working with Security Operations Vendor, Forensics Team
- Internal: IT, Business users
Education/Certification/Experience Requirements:
- Bachelor's degree in Cybersecurity, Computer Science, or a related field.
- A minimum of 7+ years hands-on practical experience in IT security .
- Any of the following Certifications: CISSP, GCIA, GCIH, Azure Security Engineer, Microsoft SC-200 would beneficial.
Core Competencies Required for the Role:
- Advanced Threat Hunting
- Security Automation & Orchestration
- Cross-Functional Incident Leadership
- Regulatory & Policy Awareness
- Vendor Management & SLA Governance
Working Environment and Physical Demands Analysis:
- Office environment
- Periods of high volume with tight timelines
- Long periods of stationary position/sitting
- Prolonged periods of repetitive movement (i.e. using a keyboard and mouse)
- Long periods of time in viewing a computer screen
- Multi-tasking may include speaking to customers on a telephone call while looking up information on a computer program.
Why join First National?
- Competitive Compensation
- Comprehensive benefits program (i.e., Health Spending Account, Maternity and Parental Leave Top Up)
- Extensive training programs to set our employees up for success
- Modern office environment conducive to collaboration
- Supportive teamwork culture
- Opportunities to give back to the communities and work through events focused on a variety of charities
- Ongoing social events throughout the year
The team you’ll join:
Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through the mortgage broker channel and we are Canada’s largest commercial mortgage lender.
First National has been consistently recognized as a great place to work and we are proud that our employee engagement feedback is higher than our industry partners.
We would like to thank all applications for their interest in this existing vacancy, but only candidates selected for an interview will be contacted.
First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation and any other category protected by law.
First National supports requests for accommodation from applicants with disabilities; please contact Human Resources at [email protected] should you need an accommodation at any point in the recruitment process.
Artificial Intelligence is not used in our recruitment or hiring process for this role.
#FNLOON
First National Financial LP Toronto, Ontario, CAN Office
Toronto, Canada
