Security Operation Analyst

Quebec, Quebec, Canada
Remote
Posted Sep 24, 2026
1 position

Opens an external site

Employment type: Full-time
Experience level: Mid-level · 2+ years
Minimum education: Bachelor’s degree
Posting language: English
Working hours: 40 hours per week

Job summary

The Security Operation Analyst will provide continuous security monitoring, detection, and incident response for cloud infrastructure and the integration platform. They will also manage vulnerabilities, maintain detection rules, and support compliance evidence gathering for audits.

Job details

At Flexspring, you will have the autonomy and flexibility to tackle your role in a way that is right for you. We foster a learning culture that will allow you to develop new skills and progress in your career. Who We Are Flexspring is an iPaaS (Integration Platform as a Service) company specializing in HR data integrations. We partner with HR teams and HR software companies to design and deliver custom integrations that connect HR, payroll, and business systems, reduce manual work, improve data accuracy, and help people's operations run more efficiently. The Role As our Security Analyst, you will provide continuous security monitoring, detection, and incident response for Flexspring's cloud infrastructure and integration platform. You will work closely with our Security & Compliance Lead to close the gap between governance/audit readiness and day-to-day operational security, acting as the team's frontline eyes on threats while supporting vulnerability management and compliance evidence gathering. You will also serve as the secondary owner for security incident response, ensuring the department is never a single point of failure on security matters. What You'll Do Monitor security alerting and detection tooling (SIEM/EDR) on an ongoing basis; triage, investigate, and escalate confirmed security incidents. Own vulnerability management end to end: track findings from scans and penetration tests through to remediation, following up with the relevant technical owners across IT Ops, Cloud Engineering, and SRE. Maintain and tune detection rules and alert logic to reduce false positives and close monitoring coverage gaps. Act as secondary owner for security incident response, working alongside the Security & Compliance Lead, following the department's established escalation protocols (routed through Jira, no ad hoc direct messaging). Support the Security & Compliance Lead with evidence collection for SOC 2 / ISO 27001 audits where operational or technical evidence (logs, monitoring configurations, incident records) is required. Coordinate with Cloud Engineering and Integration Support/SRE teams during active security incidents to determine root cause and scope. Stay current on emerging threats, vulnerabilities, and security best practices relevant to cloud infrastructure and SaaS/iPaaS platforms. Ensure any AI-assisted tooling used for triage or detection complies with Flexspring's AI & R&D Safe Sandbox Policy (read-only service accounts, sandboxed environments, no unauthorized use of customer data). What You Get Work from home with flexible hours. 4 weeks of paid vacation annually. Comprehensive health benefits package for you and your family. Team events and opportunities to connect with colleagues. Opportunity to work with cutting-edge technologies. Competitive base salary. What You Bring Must Have Bachelor's degree or College Diploma in Information Technology, Computer Security, Computer Science, or equivalent experience. Practical experience with security monitoring tools (SIEM, EDR, or equivalent) and incident triage/investigation. Working knowledge of vulnerability management processes (scanning, prioritization, remediation tracking). Familiarity with cloud infrastructure security fundamentals (AWS preferred): networking, IAM, logging. Understanding of compliance frameworks such as SOC 2 and/or ISO 27001. Strong analytical and documentation skills; comfortable working through Jira-based ticketing and escalation processes. Nice to Have Security certifications (Security+, GSEC, GCIH, or equivalent). Experience with AWS-native security tooling (GuardDuty, Security Hub, CloudTrail). Exposure to SaaS/iPaaS environments or HR technology platforms. Scripting/automation experience (Python, or similar) to support detection tuning or reporting. Experience supporting external audits or penetration test coordination. For more information about Flexspring, visit: https://www.flexspring.com/ Equal Opportunity Employer Statement Flexspring is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Flexspring are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Flexspring does not tolerate discrimination or harassment based on any of these characteristics. Flexspring encourages applicants of all ages.

What you’ll do

Requirements

Candidates must have a degree in Information Technology, Computer Security, or Computer Science, along with practical experience in security monitoring and incident triage. Proficiency in cloud security fundamentals, vulnerability management, and compliance frameworks like SOC 2 or ISO 27001 is required.