Security Analyst I

Interested? Let's talk about what we're hiring for:

SkyBox Labs is looking for a Security Analyst I to join our Security team as a hands-on first line of defense in protecting our studio's and our partners' IP. You'll help operate and maintain the tooling that keeps our workforce and partner integrations secure.

In this role, you'll be a first responder to security events and a go-to advisor for project teams who need security guidance. You'll join a tight-knit team where everyone jumps in to help each other, works with top-tier enterprise security tooling, and is genuinely excited to keep learning. If you like variety, want to work somewhere your work directly protects some of the industry's biggest partnerships, and thrive on figuring things out with a sense of urgency, we want you on our team!

This is an onsite role based out of our office in Burnaby. Some off-hours work should be expected, including occasional planned maintenance outside business hours.

Threat detection and incident response

• Act as first responder for security alerts and phishing reports

• Triage, analyze, and investigate to determine scope, impact, and required action

• Monitor and analyze threat activity across SIEM, UEBA, and EDR toolsets to identify indicators of compromise for remediation or suppression

• Maintain incident response documentation, runbooks, and post-incident records

Vulnerability and patch management

• Run enterprise vulnerability scans, prioritize findings by risk and exploitability, and drive remediation with system owners

• Deploy patches and track hardware/software remediation to resolution

Endpoint and identity management

• Ensure security tooling is deployed and healthy across all endpoints

• Enrol devices into MDM and configure policies that enforce security baselines and hardening standards

Network and access security

• Make VLAN assignment and related configuration changes to network switches, executed under change control

• Support access control and single sign-on (SSO) operations to enforce least-privileged, trusted access

Governance, awareness, and stakeholder engagement

• Deliver security awareness training, including monthly phishing simulation testing

• Liaise with business and system owners to manage changes in line with their controls and our partner obligations

• Keep current with the latest security, vulnerability, and technology developments relevant our threat landscape

• Minimum 3 years of experience in an IT position, including at least 1 year of cyber security experience

• Hands-on experience across security tooling such as endpoint security, firewalls, email security, Data Loss Prevention (DLP), Privileged Access Management (PAM), and Single Sign-On (SSO)

• A functional understanding of IT infrastructure, networking, and cybersecurity fundamentals, spanning Windows and Linux

• Knowledge of mobile device management, security, and asset tracking

• Familiarity with systems security policies, standards, and procedures, and a working knowledge of ITIL processes and change management

• Hands-on experience with Cisco switch infrastructure

• Ability to analyze complex problems, determine root cause, and implement corrective action with a sense of urgency

• Strong research, data-analysis, and project management skills, with the ability to engage stakeholders across the organization

Nice-to-Haves:

• Prior experience in games, media, or IP-sensitive environments where partner or client confidentiality obligations shape the security program

• Exposure to cloud and SaaS security (identity, conditional access, CASB/DLP) in a hybrid work environment

• Hands-on experience with Entra ID and Intune

• Progress toward, or completion of, industry certifications (e.g. CompTIA Security+, MSFT SC-200, Blue Team/SOC analyst credentials)

• Annual bonus and up to 3% RRSP matching available

• Comprehensive health benefits, along with a supportive Parental Leave policy

• Flexible hybrid working arrangements: leverage our beautiful studio spaces as needed and have the ability to work from home on certain projects

• Take care of your mental health with our Employee Assistance Program, 3 weeks of vacation leave, and our free gym at our Burnaby Studio

• We relentlessly support your growth and development! Explore other disciplines through our Guild Program, and expand your game dev knowledge with Lunch & Learns. You'll join a culture of empowerment, collaboration, and personal growth

• Social events! Have fun with the team at trivia nights, karaoke nights, movie nights, and various group activities. Join our soccer team, game jams, or a board game sesh after work. You name it, we've got it!

• Get involved with our diverse community through Employee Resource Groups (ERGs) that champion Diversity, Equity & Inclusion initiatives and promote a supportive environment

• You'll help protect the great partnerships behind industry-leading titles!

The base salary range is $67,000 - $112,000. The stated pay scale reflects the range that SkyBox Labs reasonably expects to pay for this position. Your base salary will be determined by various factors including, but not limited to, qualifications, skills, and experience.

Minimum 3 years of IT experience with at least 1 year in cybersecurity. Hands-on experience with security tooling (endpoint, firewalls, email security, DLP, PAM, SSO). Functional understanding of IT infrastructure, networking, and cybersecurity fundamentals across Windows and Linux. Knowledge of MDM, security, and asset tracking. Familiarity with systems security policies, ITIL processes, and change management. Hands-on experience with Cisco switch infrastructure. Ability to analyze complex problems and implement corrective action with urgency. Strong research, data-analysis, and project management skills.