Pomerleau Career Site | Find your new job

Ready to build your career? We want to hear from you.

Reporting to the IT Security Manager, the IT Security Analyst plays a critical role in protecting Pomerleau's and its subsidiaries' systems, networks, and data. The successful candidate will contribute to the availability, performance, and security of the organization's technology environment through proactive monitoring, incident management, and continuous improvement of security controls.

This role works closely with IT, Infrastructure, and Cybersecurity teams to defend the organization against internal and external threats while ensuring compliance with regulatory requirements and industry best practices.

This position provides an opportunity to make a direct impact on the organization’s security posture within a rapidly evolving technology landscape.

What you will do


• Monitor technology infrastructure and security platforms to identify and respond to threats, incidents, and performance issues.
• Administer and maintain security solutions, including intrusion detection systems, identity and access management platforms, and endpoint and network protection technologies.
• Manage, document, and resolve security incidents and service requests while meeting established service levels.
• Perform security assessments, participate in penetration testing activities, and help identify vulnerabilities.
• Collaborate in the development and enhancement of security policies, procedures, and standards.
• Maintain security documentation, system configurations, and operational procedures.
• Participate in incident response activities and provide support during major security events when required.
• Share knowledge, support team development, and contribute to continuous improvement initiatives.
• Stay current on emerging threats, trends, and technologies, and recommend improvements to strengthen security controls.


This role could be for you if you have

• Degree in Information Technology, Cybersecurity, or a related field.
• Experience in IT Security, Cybersecurity, or Security Operations.
• Strong understanding of security protocols, cybersecurity tools, and industry best practices.
• Knowledge of EDR, SIEM, Honeypot, and Microsoft 365 technologies.
• Familiarity with security frameworks and regulations such as ISO 27001, GDPR, PIPEDA, and Quebec Law 25.
• Strong analytical, problem-solving, and organizational skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Strong attention to detail, accountability, and ability to manage multiple priorities.
• Excellent communication skills with the ability to explain technical concepts to various audiences.
• Eligibility to obtain a Government of Canada Secret Security Clearance.

Assets

• Experience with cloud environments (Azure, AWS, or GCP).
• Knowledge of ITIL best practices.
• Security certifications (CISSP, CISM, CEH, Security+, etc.).

• Availability for occasional travel within Canada and the United States.

• RRSP with up to 5% employer matching

• Hybrid work model for corporate roles
• Employee stock ownership program
• Career growth through real development opportunities
• Transit pass reimbursement — get to work for free
• Minimum 4 weeks of vacation from day one


For the past six years, we've proudly held the distinction of being one of Canada's Top 100 Employers.

Pomerleau is a national leader in construction, delivering major projects across Canada. We believe in creating a workplace where people feel respected, supported, and empowered to grow. Our culture is built on collaboration, trust, and a shared commitment to doing great work. If this speaks to you, apply for this role or connect with one of our recruiters to learn how we can support you throughout the process.