Security Analyst I

About PointClickCare

PointClickCare is a privately held, founder-led health technology company focused on helping care providers deliver outstanding outcomes. Its platform supports more than 30,000 provider organizations and is backed by a large long-term and post-acute care data set plus a marketplace of 400+ integrated partners. The company invests heavily in research and development and is recognized for innovation, flexibility, and a strong workplace culture. Employees are encouraged to use AI to improve creativity, productivity, and decision-making while continuing to develop new capabilities through training and support.

Role Overview

The Security Analyst will safeguard the company’s networks, data centers, cloud environments, endpoints, and systems, including SaaS-based corporate and product environments. This role supports security operations, cyber defense, and vulnerability management through automation, tool evaluation, and AI-enabled solutions. The position also includes leading selected security projects and helping strengthen the organization’s overall security posture.

Remote Work Expectations

This is a remote position, but occasional travel to the Mississauga and/or Salt Lake City office is required for onboarding, team events, and semi-annual or annual team meetings.

Responsibilities

• Serve as the main contact for day-to-day security incident monitoring, analysis, and reporting through the SIEM platform.
• Support the installation, upkeep, and operation of security tools and infrastructure such as SIEM, antivirus, DLP, PAM, and IAM.
• Conduct ad hoc threat risk assessments across infrastructure, systems, and cloud-based solutions, then coordinate remediation with operational teams.
• Identify opportunities to automate existing workflows using AI tools, automation frameworks, and workflow management solutions.
• Apply practical knowledge of networking and security technologies, including IP/TCP-IP, network administration protocols, access controls, WAFs, firewalls, and virtualized access control solutions such as network security groups.
• Work with Windows, Active Directory, Group Policy, DNS, and Apple operating systems.
• Assist with vulnerability management by running routine scans and partnering with SaaS Operations and Corporate Technology teams to track remediation.
• Evaluate security tools and processes with the Director of Security Operations and suggest improvements to tools, configurations, policies, and procedures.
• Prepare monthly reporting on security KPIs, change requests, incidents, and threats or events.
• Help fine-tune alerting to lower false positives.
• Support incident response activities, investigations, documentation of findings and root causes, and review of new threats and alerts for relevance to the business.
• Partner with business groups to maintain a proactive, organization-wide security presence.
• Lead technical security initiatives and projects aimed at improving the company’s security posture.
• Take part in security audits, compliance reviews, and vulnerability remediation with Security, Corporate Technology, SaaS Operations, and GRC teams.
• Work independently, escalate to leadership when needed, and carry out additional responsibilities as assigned.

Requirements

• Comfort using agentic AI systems in security operations, including alert triage, review of AI-generated findings, and validation of automated responses.
• Basic understanding of large language models, including prompt design, context handling, and critical evaluation of outputs.
• Ability to create simple skills or playbooks in structured formats such as YAML, JSON, or platform-specific DSLs.
• Exposure to MCP or similar integration frameworks, with the ability to configure basic links between AI agents and external security tools.
• Familiarity with security automation concepts such as trigger-condition-action logic, API integrations, and basic scripting; Python is preferred.
• Judgment to identify when AI output is inaccurate, unusual, or needs human escalation in human-in-the-loop workflows.
• Strong understanding of information security, common vulnerabilities and threats, security best practices, tools, techniques, and encryption.
• Hands-on experience with Python and PowerShell.
• Experience administering Linux variants, plus bash/shell scripting and Python-based automation.
• Ability to work autonomously, collaborate across teams, and engage leadership proactively when necessary.

Perks and Benefits

• Benefits available starting on day one.
• Retirement plan matching.
• Flexible paid time off.
• Wellness support programs and resources.
• Parental and caregiver leave.
• Fertility and adoption support.
• Ongoing learning and development support.
• Employee assistance program.
• Allyship and inclusion communities.
• Employee recognition and additional rewards.
• The role is eligible for overtime and includes a bonus opportunity.

Eligibility and Compliance

This opportunity is intended for candidates who can work in Canada and meet the remote-role travel expectations for occasional visits to the Mississauga and/or Salt Lake City office. Applicants should be prepared to support security policies, procedures, and confidential information handling if hired. PointClickCare is an equal opportunity employer and welcomes applicants with disabilities; accommodations are available on request during the selection process. The company also uses AI tools to support parts of screening and assessment, while final hiring decisions remain human-led.

Compensation

The Canada base salary range for this position is CAD 72,000 to CAD 80,000 annually, plus a 10% bonus and benefits. The role is overtime eligible. Pay within the range depends on role level, job-related skills and knowledge, relevant experience, and work location.

Privacy and Hiring Process

Application information is processed and stored through the company’s recruitment system and may be retained for future opportunities where appropriate. Candidates may contact the recruitment team for questions about access, correction, or deletion of their information.

Information Security Notice

If hired, you will be expected to follow company information security policies and procedures and take reasonable steps to protect confidential and sensitive information.