Network Operations Manager Jobs in Burnaby, BC (NOW HIRING)

Incident Detection & Response 

• Investigate, analyze, and respond to cyber incidents across the environment.  

• Perform security event correlation using multiple data sources to determine business impact, root cause, and appropriate remediation and mitigation measures. 

• Perform proactive threat hunting using behavioral analytics, threat intelligence, indicators of compromise (IOCs), and attacker tactics, techniques, and procedures (TTPs) to identify suspicious or malicious activity. 

• Analyze malware-related indicators, network traffic, endpoint telemetry, cloud activity, identity events, and system logs to identify malicious behavior and determine attack methods. 

• Coordinate response activities with infrastructure, networking, cloud, application, and business teams to contain and remediate security incidents. 

• Develop and maintain incident response plans and procedures, playbooks, and operational documentation. 

Security Operations & Monitoring 

• Play a key role in the delivery of security operations services across monitoring, threat detection, identity protection, vulnerability management, security analytics, and operational reporting. 

• Support, administer, and continuously improve the organization's cybersecurity technologies, including SIEM, EDR/XDR, identity and access management, network security, email security, EPM/application control, cloud services, vulnerability management, security monitoring and analytics, and automation/orchestration platforms. 

• Develop, tune, and optimize monitoring rules, detection logic, dashboards, alerts, reports, and use cases to improve visibility and detection coverage. 

• Review security events, telemetry, and existing controls to identify opportunities to improve detection capabilities and operational efficiency. 

• Validate security configuration changes and ensure cybersecurity controls remain effective. 

• Provide cybersecurity operations input on selected technology projects, including review of operational requirements, implementation considerations, and transition into production support. Provide recommendations that align with security best practices, Zero Trust principles, and defense-in-depth strategies. 

Vulnerability & Risk Management 

• Perform or assist with vulnerability assessments, exposure management, security assessments, and audit activities.  

• Assist with remediation activities by providing guidance and prioritization recommendations based on business risk, exploitability, asset criticality, and threat intelligence. 

• Monitor external intelligence sources, vendor advisories, CERT notifications, and industry reports to identify emerging threats and vulnerabilities, and assess their impact on the organization. 

Required 

• 5+ years of hands-on cybersecurity operations, incident response, detection engineering, or equivalent security operations experience. 

• University degree in a technical discipline such as Engineering or Computer Science. A combination of education and other IT/security experience may be considered. 

• Demonstrated curiosity, sound judgment, attention to detail, and strong analytical problem-solving skills. 

• Ability to work independently while collaborating effectively with technical and business teams. 

• Strong experience investigating security events using SIEM, EDR/XDR, identity, network, cloud, and endpoint telemetry. 

• Solid understanding of enterprise networking, Windows/Linux systems, Active Directory/Entra ID, Microsoft 365, and common attack techniques. 

• Experience developing or tuning detection logic, alerts, dashboards, playbooks, and operational procedures. 

• Working knowledge of vulnerability management and risk-based remediation. 

• Ability to coordinate incident response with infrastructure, cloud, application, and business teams. 

• Strong written and verbal communication skills. 

Preferred 

• Relevant certifications such as GCIH, GCIA, GCFA, CISSP, CISM, Security+, SC-200, AZ-500, CCNA/CCNP Security, or equivalent practical experience. 

• Experience with threat hunting, forensic analysis, or advanced incident response. 

• Experience with SOAR, scripting, automation, or security orchestration workflows. 

• Familiarity with IAM/PAM, EPM, DLP, cloud security, or Microsoft security platforms. 

• Experience mentoring junior analysts or contributing to security operations maturity. 

• Experience in energy, financial services, regulated industries, or other business-critical technology environments.