Sr. Cyber Security Analyst

Meet Vermilion

We responsibly produce essential energy to support local and global needs while delivering long-term value to our people, shareholders, customers, partners and communities. Our people are fundamental to our success. As a global organization, Excellence, Trust, Respect and Responsibility are at the core of our vision and central to how we do business. Together, these core values create the foundation for our strong and collaborative culture.

We prioritize health and safety, the environment, and profitability, in that order. Nothing is more important to us than the safety of the public and those who work with us, and the protection of our natural surroundings.

The Opportunity

Are you an experienced Cyber Security professional who can combine technical depth with strong business communication? Do you have experience leading investigations, digital forensics, security monitoring, penetration testing and security awareness programs across on-premises and cloud environments? We are hiring a Senior Cybersecurity & Operations Specialist for our Calgary head office.

You will help protect Vermilion's global information systems by leading complex incident response and investigations, overseeing key security platforms and service providers, and translating cyber risk into clear actions for the business. You will also coordinate the security awareness program, manage security vendors, and drive continuous improvement across security operations, cloud security and defensive controls.

What you will do

• Lead the investigation, response and documentation of complex cyber security incidents, working with internal teams, external security providers, vendors and business stakeholders.

• Conduct digital forensic investigations and analyze security alerts, logs, threat intelligence and other evidence to determine the nature, scope and impact of security events.

• Manage and continuously improve security monitoring and detection capabilities across SIEM, endpoint, identity, network and cloud security technologies.

• Oversee SOC, MxDR and other cyber security service providers, including escalations, service delivery reviews and corrective actions.

• Lead threat hunting, vulnerability management, penetration testing and security assessments, partnering with accountable teams to prioritize and remediate identified risks.

• Assess and strengthen security controls across on-premises infrastructure, Microsoft Azure, networks, endpoints, identity platforms and cloud services.

• Plan and deliver the corporate cyber security awareness program, including employee training, phishing simulations, targeted communications and follow-up activities.

• Translate cyber security risks, incidents and priorities into clear, practical recommendations for technical teams, business stakeholders and senior leaders.

• Manage cyber security vendors, contracts and initiatives, coordinating implementation activities, dependencies, risks and stakeholder communications.

• Develop security metrics, incident reports, risk assessments and management updates that support informed decision-making and continuous improvement.

• Maintain cyber security procedures, standards, policies, investigation records and operational documentation.

• Support cyber security governance, information protection, compliance, eDiscovery and litigation-related investigations in partnership with Legal and other stakeholders.

• Stay current on emerging threats, vulnerabilities, regulatory expectations and defensive technologies relevant to Vermilion’s global operations

What you will bring

• A current and valid ISC2 Certified Information Systems Security Professional (CISSP) certification and active ISC2 membership. Proof of certification will be required.

• A diploma or degree in Cyber Security, Information Technology, Computer Science or a related discipline, or an equivalent combination of education and practical experience.

• Extensive experience in cyber security operations, including incident detection, escalation, investigation and response.

• Strong experience with SIEM and security operations technologies, such as Microsoft Sentinel, and with SOC, MxDR, MSSP or other third-party security providers.

• Hands-on experience with digital forensics, vulnerability management, security assessments, remediation tracking and formal risk documentation.

• Strong technical knowledge of networking, operating systems, identity, endpoints, firewalls and core security principles.

• Strong knowledge of on-premises and Microsoft Azure cloud infrastructure and related security controls.

• Hands-on experience deploying, managing and optimizing Microsoft Defender technologies, including Microsoft Defender for Cloud, across cloud and hybrid environments.

• Demonstrated ability to explain cyber risk clearly, influence practical action and communicate effectively with technical teams, business stakeholders and senior leaders.

• Strong analytical, project management, documentation and reporting skills, with sound judgment when handling sensitive incidents and information.

• Experience managing vendors, initiatives and multiple concurrent priorities.

Additional Experience Considered an Asset

• Experience with cybersecurity governance, information protection, Microsoft Purview, eDiscovery or litigation investigation support.

  • Experience with security technologies such as Zscaler, Quorum, Red Canary or Arctic Wolf.

  • Experience conducting or supporting security assessments in operational technology environments, including industrial control systems, SCADA or other field-based technologies.

  • Additional certifications in areas such as ethical hacking, incident handling, cloud security, threat intelligence or digital forensics.

Other Key Details

• This is an office-based role requiring presence in Vermilion’s Calgary office five days per week.

• Occasional flexibility outside regular business hours may be required to support Vermilion’s global operations, including meetings or activities involving teams in other countries and time zones.

• Some international travel may be required. The successful candidate must be eligible to travel internationally for business purposes.

What we offer

• Industry-competitive time off including vacation, flex days and office closures such as Friday afternoons during the summer

• Casual yet professional office environment with a relaxed dress code

• Opportunities to connect with others, including weekly company-provided breakfast

• Competitive short-term and long-term incentive programs aimed to recognize and reward

• Top-tier benefits program, including a generous flexible health spending account and savings plan program

• Onsite childcare available (fee-based)

• Company-sponsored volunteer opportunities and volunteer grants

Why you’ll love working with us

• We care for each other, the environment and the company, and aim to enrich the communities in which we live and work

• We embrace new solutions across the business, allow space for creativity, and invest in innovation and technology

• We operate with honesty, transparency and fairness, and can be counted on to do what we say we will

• We invest in our employees, providing meaningful work and opportunities for training and professional development

• We have been focused on sustainability for more than a decade 

• We are focused on the future: responsibly producing the oil and natural gas that is essential to energy security while exploring alternative energy options

Vermilion is committed to diversity and inclusion, and aims to create a healthy, accessible and rewarding work environment that highlights our employees’ unique contributions to our company’s success. As an equal opportunity employer, we welcome all applications to help us build a diverse workforce that reflects the communities in which we live and work.

Outstanding People. Outstanding Opportunities.