Senior Analyst, IT Security

Follow us on LinkedIn

Posting Reason:

Replacement of a regular position

Job Type:

Employee

Anticipated Duration in Months (for contracts and temporary assignments):

N/A

Job Family:

IT Security

# of Open Positions:

1

Faculty/Service - Department:

IT Services and Infrastructure

Campus:

Main Campus

Union Affiliation:

N/A

Date Posted (YYYY/MM/DD):

2026/10/22

Applications must be received BEFORE (YYYY/MM/DD):

2026/11/02

Hours per week:

35

Salary Grade:

Non-Union Grade NC8 - 35 hrs

Salary Range:

$96,570.00 - $120,712.00

About Information Technology:
Information Technology is a dynamic and collaborative environment. We are focused on prioritizing and optimizing technological investments that facilitate the best student experience, as well as the activities of faculty, researchers and staff. Our greatest strength are the people working with us. People like you, professionals eager to flex their intellectual muscle and achieve new heights in their career. Working here gives you access to a great IT environment, rich with a diverse range of platforms, products, and services. This is a place where innovative ideas are welcome.
In a nutshell: working here is challenging and rewarding. It’ll bring out the best of you. We want people that have the drive to advance IT in higher education. We have the technologies to keep your inner fires burning, and benefits that can help you sustain a better lifestyle. And all this minutes away from gyms, the Byward Market, downtown, and the Rideau Canal at lunch time for runners and skaters.

Position Purpose

Reporting to the Senior Manager, IT Security, the incumbent develops, implements, upgrades, integrates, tests, manages, and supports information security systems and applications. Performs real-time analysis and correlation of logs/alerts from a multitude of infrastructure, network, and security devices with a focus on the determination of whether said events constitute infrastructure, network, or security incidents. Responsible for researching and documenting various mitigation strategies. Provides information security education to the University community and prioritizes remediation of issues in a highly complex environment with critical uptime requirements.

In this role, your responsibilities will include:

• Security Administration and Platforms: Implement, operationalize, customize, configure, program, test, and maintain complex security systems, platforms, and solutions using multiple technologies. Provide technical recommendations for improving IT security infrastructure and assists in the coordination of audit and compliance requirements
• Analytics and Monitoring: Monitor a wide variety of IT assets, network, and data to ensure the prevention of events that negatively impact confidentiality, availability, and integrity. Build/manage reports and analyze logs and messages to identify and report possible security violations. Collect and analyse performance reports for various systems, and report trends in hardware and application performance to assist senior technical personnel to predict future issues or outages.
• Development: Develop program code/scripts according to technical standards and security policies. Build/develop use cases for Security and/or Network Operations Centre.
• Vulnerability Assessments and Penetration Testing: Perform ongoing vulnerability assessments and penetration testing of systems and networks to ensure compliance with security policies, standards, and procedures. Interface with IT teams on implementing controls.

What you will bring:

• University degree in Computer Science, Management Information Systems (MIS) or related field or an equivalent combination of education and experience.
• Minimum 5 years of experience in a complex and diverse IT environment demonstrating experience in IT security.
• Experience with PeopleSoft security would be considered an asset.
• Experience with Microsoft Entra ID or comparable identity platforms would be considered an asset.
• Hands-on experience in application security and DevSecOps, including security assessments of web applications, APIs, and enterprise applications.
• Experience integrating applications with Single Sign-On (SSO) using SAML 2.0 and OpenID Connect, and knowledge of OAuth 2.0 authorization flows.
• Ability to configure and troubleshoot federation metadata, certificates, claims, tokens, and application access controls.
• Knowledge of secure coding, threat modelling, security design reviews, OWASP Top 10, API security risks, and secure software development life cycle (SSDLC) practices.
• Experience configuring and tuning Web Application Firewalls (WAF), onboarding applications, analyzing security events, managing exceptions, and troubleshooting false positives.
• Experience integrating SAST, DAST, SCA, and secrets scanning into CI/CD pipelines; interpreting findings; and implementing security checks and remediation workflows.
• Knowledge of container and infrastructure as code security.
• Experience with programming and scripting languages used for application security reviews and automation, source control, and software development methodologies.
• Experience configuring, testing, and troubleshooting Multi-Factor Authentication (MFA) and application access policies in collaboration with Identity and Access Management teams.
• Bilingual: French and English, spoken and written.

#LI-Hybrid

Key Competencies at uOttawa:
Here are the required competencies for all or our employees at uOttawa: 
Planning: Organize in time a series of actions or events in order to realize an objective or a project. Plan and organize own work and priorities in regular daily activities.
Initiative: Demonstrate creativity and initiative to suggest improvements and encourage positive results. Is proactive and self-starting. Show availability and willingness to go above and beyond whenever it is possible.
Client Service Orientation: Help or serve others to meet their needs. This implies anticipating and identifying the needs of internal and external clients and finding solutions on how to meet them.
Teamwork and Cooperation: Cooperate and work well with other members of the team to reach common goal(s). Accept and give constructive feedback. Able to adjust own behaviour to reach the goals of the team.
The University of Ottawa embraces diversity and inclusion in the workplace. We are passionate about our people and committed to employment equity. We foster a culture of respect, teamwork and inclusion, where collaboration, innovation, and creativity fuel our quest for research and teaching excellence. While all qualified persons are invited to apply, we welcome applications from qualified Indigenous persons, racialized persons, persons with disabilities, women and LGBTQIA2S+ persons. The University is committed to creating and maintaining an accessible, barrier-free work environment. The University is also committed to working with applicants with disabilities requesting accommodation during the recruitment, assessment and selection processes. Applicants with disabilities may contact [email protected] to communicate the accommodation need. All qualified candidates are encouraged to apply; however, Canadians and permanent residents will be given priority.
Note: if this is a union position: The hiring process will be governed by the current collective agreement related to the union affiliation noted above; you can click here to find out more.
If this is a front-line position with responsibilities to interact with students, selected candidates must be rated at the Low Advanced proficiency level or higher for both oral comprehension and reading comprehension in their second official language. The rating is determined by a proficiency test designed by the Official Languages and Bilingualism Institute.

Prior to May 1, 2022, the University required all students, faculty, staff, and visitors (including contractors) to be fully vaccinated against Covid-19 as defined in Policy 129 – Covid-19 Vaccination. This policy was suspended effective May 1, 2022 but may be reinstated at any point in the future depending on public health guidelines and the recommendations of experts.