[Hiring] Security Analyst @Canopy Growth Corporation

Role Description

Canopy Growth is seeking a highly motivated and technically proficient Security Analyst to join our Cybersecurity team. This is a unique opportunity for an individual passionate about cyber defense, threat detection, and incident response.

As a key member of our cybersecurity team, you will serve as the dedicated security operations function:

• Monitoring threats
• Triaging alerts
• Investigating incidents
• Coordinating response activities

You will work alongside our Managed Detection and Response (MDR) provider to complement external escalation with internal investigation, tuning, and cross-tool correlation. You will play a critical role in ensuring our environment remains secure as the organization continues to grow.

If you’re driven by curiosity, thrive under pressure, and want to make a direct impact on a growing cybersecurity program, this role offers the chance to contribute to Canopy Growth’s security posture at scale.

Responsibilities

• Vulnerability Management
  • Own the end-to-end vulnerability management lifecycle using an enterprise vulnerability management platform.
  • Configure and maintain scan engines, scan templates, asset groups, credentialed scanning, and scan schedules.
  • Take ownership of retesting and validating remediation.
  • Track remediation against defined SLAs and report on vulnerability posture and trends.
  • Deploy and maintain scan sensors/engines across a distributed, multi-site environment.
• Security Testing
  • Coordinate independent penetration tests.
  • Perform internal security testing to validate detection and response controls.
  • Apply CVSS scoring to assess vendor-assigned severity ratings.
  • Help move the program from theoretical risk discussions toward evidence-based assurance.
• Application Security
  • Operate and administer our application security (SAST/SCA) scanning program.
  • Triage SAST and Software Composition Analysis (SCA) findings.
  • Partner with development and cloud teams to embed secure practices into the software development lifecycle.
• Continuous Improvement & Collaboration
  • Research and recommend enhancements to vulnerability management, testing, and application security practices.
  • Support incident response readiness, including participation in tabletop exercises.
  • Maintain clear documentation and keep team tracking tools current.
  • Stay current with cybersecurity trends, tooling, vulnerabilities, and best practices.
• Other Responsibilities
  • Cross-train with cybersecurity team members.
  • Support team-wide initiatives, special projects, and process improvements.
  • Perform other duties as assigned to support the evolving needs of the cybersecurity program.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).
• 3+ years of hands-on experience in vulnerability management, security testing, or offensive security roles.
• Hands-on experience with an enterprise vulnerability management platform.
• Working knowledge of application security testing concepts and tools (SAST/SCA).
• Solid understanding of the Common Vulnerability Scoring System (CVSS) and vulnerability assessment methodologies.
• Familiarity with penetration testing concepts and experience coordinating or supporting third-party testing engagements.
• Strong working knowledge of Linux and Windows operating systems, network protocols, and common security tools.
• Familiarity with cybersecurity frameworks such as NIST 800-53, NIST CSF, or ISO 27001.
• Preferred certifications include OSCP, GIAC GPEN/GWAPT, CEH, CompTIA PenTest+, CySA+.
• Strong problem-solving, documentation, and communication skills.
• Proven ability to manage multiple security priorities in a fast-paced, evolving environment.
• Previous experience in an IT Operations/Infrastructure role would be an asset.

Other Details

• This is a full-time, remote-first position based out of Ontario.
• Salary Range: $80,000 - $90,000
• Benefits: extended health and dental coverage, paid vacation, and participation in our employer-supported retirement savings program.