Analyze data breaches and cyber insurance claims, conduct client security gap analyses, and advise CISOs on improving security controls. Partner with product teams to codify security best practices into underwriting algorithms and risk management applications at a leading cyber insurance provider.
2-4 years of hands-on experience in security analysis, blue team/defensive security operations, and/or penetration testing/red team engagements
Deep understanding of the lifecycle of network threats, common attack vectors, and exploitation methods including TTPs
Strong knowledge of TCP/IP protocols, network analysis, and network/security applications including log and traffic capture and analysis
Experience with vulnerability assessment and offensive security tools such as Nmap, Nessus, Burp Suite, Kali Linux, or Metasploit
Working knowledge of industry-standard security and risk frameworks such as NIST CSF, ISO 27001, HIPAA, and PCI DSS
Clear, confident interpersonal communication skills with ability to translate technical concepts for non-technical audiences
Demonstrated ability to learn new technical concepts quickly and manage multiple tasks in a fast-paced environment
Bachelor's degree in Computer Science, Information Security, Engineering, or related field, or equivalent practical experience
Review and analyze the security posture of insureds and prospective insureds quickly and efficiently
Evaluate customer security programs, technologies, controls, and business environments and recommend enhancements to reduce risk
Analyze root cause of cyber insurance claims and loss events and identify ways to detect and mitigate exposures
Triage security incidents and claims, understand root cause, and develop detection tradecraft informed by threat intelligence
Provide practical, prioritized recommendations to help customers manage information security risk and strengthen programs
Track emerging security practices, threat trends, and vulnerabilities and contribute insights to internal processes and product capabilities
Stay current on regulatory landscape and industry standards and interpret implications for Coalition and customers
Collaborate cross-functionally with underwriting, claims, product, and engineering teams to translate security insights into scalable solutions
Remote-first organization with compensation reflecting cost of labor across Canadian geographic markets
Higher salary range applies in Alberta, British Columbia, and Ontario
Human recruiting team makes all final hiring decisions despite AI-assisted tools for application review
Status update provided within 45 days of final interview for all interviewed candidates
Posting is for an existing vacancy