Interested? Let's talk about what we're hiring for:

SkyBox Labs is looking for a Security Analyst I to join our Security team as a hands-on first line of defense in protecting our studio's and our partners' IP. You'll help operate and maintain the tooling that keeps our workforce and partner integrations secure.

In this role, you'll be a first responder to security events and a go-to advisor for project teams who need security guidance. You'll join a tight-knit team where everyone jumps in to help each other, works with top-tier enterprise security tooling, and is genuinely excited to keep learning. If you like variety, want to work somewhere your work directly protects some of the industry's biggest partnerships, and thrive on figuring things out with a sense of urgency, we want you on our team!

This is an onsite role based out of our office in Burnaby. Some off-hours work should be expected, including occasional planned maintenance outside business hours.

Threat detection and incident response

• Act as first responder for security alerts and phishing reports

• Triage, analyze, and investigate to determine scope, impact, and required action

• Monitor and analyze threat activity across SIEM, UEBA, and EDR toolsets to identify indicators of compromise for remediation or suppression

• Maintain incident response documentation, runbooks, and post-incident records

Vulnerability and patch management

• Run enterprise vulnerability scans, prioritize findings by risk and exploitability, and drive remediation with system owners

• Deploy patches and track hardware/software remediation to resolution

Endpoint and identity management

• Ensure security tooling is deployed and healthy across all endpoints

• Enrol devices into MDM and configure policies that enforce security baselines and hardening standards

Network and access security

• Make VLAN assignment and related configuration changes to network switches, executed under change control

• Support access control and single sign-on (SSO) operations to enforce least-privileged, trusted access

Governance, awareness, and stakeholder engagement

• Deliver security awareness training, including monthly phishing simulation testing

• Liaise with business and system owners to manage changes in line with their controls and our partner obligations

• Keep current with the latest security, vulnerability, and technology developments relevant our threat landscape

• Minimum 3 years of experience in an IT position, including at least 1 year of cyber security experience

• Hands-on experience across security tooling such as endpoint security, firewalls, email security, Data Loss Prevention (DLP), Privileged Access Management (PAM), and Single Sign-On (SSO)

• A functional understanding of IT infrastructure, networking, and cybersecurity fundamentals, spanning Windows and Linux

• Knowledge of mobile device management, security, and asset tracking

• Familiarity with systems security policies, standards, and procedures, and a working knowledge of ITIL processes and change management

• Hands-on experience with Cisco switch infrastructure

• Ability to analyze complex problems, determine root cause, and implement corrective action with a sense of urgency

• Strong research, data-analysis, and project management skills, with the ability to engage stakeholders across the organization

Nice-to-Haves:

• Prior experience in games, media, or IP-sensitive environments where partner or client confidentiality obligations shape the security program

• Exposure to cloud and SaaS security (identity, conditional access, CASB/DLP) in a hybrid work environment

• Hands-on experience with Entra ID and Intune

• Progress toward, or completion of, industry certifications (e.g. CompTIA Security+, MSFT SC-200, Blue Team/SOC analyst credentials)