Senior Cybersecurity Analyst

About Dialogue

Dialogue is the #1 virtual care provider in Canada. By developing our Integrated Health Platform, we provide exceptional online health and wellness programs (primary care, mental health, iCBT, EAP, and wellness) to organizations that want to improve the wellness of their employees and families.

When it comes to our work, we set the bar high. Together, we’re transforming health and helping millions improve their well-being. We’re firm believers that great people don’t settle on:

• Impact
• Community
• Growth
• Excellence

Feel like you can make a difference? Good news, we saved you a seat!

Come as you are. As a proud equal-opportunity employer, Dialogue is dedicated to creating a diverse and inclusive workplace for everyone. Qualified applicants will be considered regardless of citizenship, ethnicity, race, colour, religion, gender, gender identity or expression, sexual orientation, disability, age, or veteran status.

Applicants who require specialized accommodation are encouraged to contact accessibility@dialogue.co.

Your role as a Senior Cybersecurity Analyst

The Senior Cybersecurity Analyst is a hands-on technical member of the Cybersecurity team, responsible for helping operate and strengthen Dialogue’s core security capabilities. You will report to the Cybersecurity Team Lead and work closely with other security team members, IT, DevOps, Engineering, Legal, Compliance, and business stakeholders.

Your focus will be the day-to-day systems and processes that help Dialogue identify, understand, and respond to security risk. This includes security monitoring and logging, vulnerability management, security tool administration, application security support, incident investigation, operational reporting, and the development of practical security processes and runbooks.

This is a role for someone who takes ownership of technical security work and follows it through to resolution. You will investigate alerts and findings, improve detections and tooling, automate repetitive workflows, and help teams understand what needs to be fixed and why. You will be expected to work independently while collaborating with others when the work crosses systems, teams, or areas of expertise.

You do not need to have every process fully defined before getting started. You are comfortable working in an evolving security environment, identifying gaps, bringing structure to incomplete workflows, and helping build more consistent and mature security practices over time. You know when to make a pragmatic technical decision and when to escalate higher-risk architectural, business, or strategic concerns.

What you'll be doing

• Own and improve security monitoring: Manage and enhance our SIEM and logging environment, onboard new data sources, and ensure we have the visibility needed to detect and investigate threats.
• Strengthen detection and response: Triage alerts, investigate suspicious activity, tune detections, and reduce false positives. Build and maintain clear runbooks to support consistent and efficient response.
• Support incident investigations: Assist with investigations, evidence collection, and analysis, helping the team respond effectively when incidents occur.
• Drive meaningful security improvements: Identify recurring issues across incidents and vulnerabilities, and work with teams to address root causes and strengthen controls.
• Provide application security guidance: Partner with developers to review findings, prioritize risks, and deliver practical, actionable remediation advice.
• Contribute to security reviews: Participate in application and project reviews, helping teams identify risks and make informed security decisions.
• Operate and improve security tools: Support day-to-day administration, integrations, and enhancements of security platforms, including automation where it adds value.
• Collaborate across teams: Work closely with IT, DevOps, Engineering, and business stakeholders to investigate issues, communicate risks, and drive work to completion.
• Help mature security practices: Contribute to building scalable processes, documentation, and standards as the security program evolves.

We'd love to hear from you if you have

• 3+ years of professional experience in cybersecurity or a related technical role, with hands-on experience in security monitoring, vulnerability management, incident response, security tooling, or cloud security.
• Experience with the technologies and workflows that support modern security operations, including cloud platforms such as AWS, Git, CI/CD, and infrastructure-as-code tools such as Terraform.
• Worked with application-security testing tools or secure-development practices and are comfortable helping teams understand and address security findings.
• Used Python, PowerShell, Bash, or another scripting language to automate operational tasks and improve security workflows.
• Integrated security tools or platforms using APIs, scripts, or workflow automation.
• Experience with endpoint security, identity, privileged access management, or cloud security platforms.
• Supported security incident investigations through alert analysis, technical troubleshooting, evidence collection, or coordination with other teams.
• Created, tuned, or maintained SIEM detections, detection-as-code, or version controlled detection logic.

At Dialogue, your well-being is our priority

Taking care of others also means taking care of our team! Depending on your role and employment status, you could have access to the following benefits:

• Access to the Dialogue app and virtual mental health support for you and your family
• Fully funded insurance, a health spending account, dental coverage, and fitness reimbursement
• 4 weeks vacation, 9 wellness days, and 1 volunteer day
• Hybrid work: 3 days/week in our Montreal office, excluding remote roles
• Work abroad up to 4 weeks/year
• Incentive plans, referral bonuses & RRSP matching
• Learning via Coursera, external training budget & mentorship
• Optional parental leave top-up