Security Analyst

We need to output only HTML fragment, no /, no markdown fences. Use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Include sections only if posting has real specific content. We need to extract content. The posting includes: - Position Description: "The best version of us starts with You! We CGI is looking for passionate and detail-oriented Security Analysts to join our team supporting a leading global Banking client. The role involves vulnerability remediation and large-scale patch deployment following heightened regulatory focus on AI-enabled cyber threats. The initiative supports cyber hygiene, operational resilience and safe continuity of client’s business services. Selected candidates will lead the organization’s vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritized, remediated, and governed. The role is responsible for reducing cyber risk exposure by coordinating remediation efforts across infrastructure, cloud, application, and technology teams while ensuring compliance with internal policies, regulatory requirements, and remediation SLAs. This is a Full-Time, On-Site employment opportunity located in Jacksonville, FL in a Hybrid Model." That's about the role. Then "Your future duties and responsibilities" list bullet points. Then "Required Qualifications To Be Successful In This Role At least 9 years of experience as a Security Analyst or in a closely related cybersecurity role: ..." includes qualifications. Then compensation info: "A reasonable estimate of the current range for this role in the U.S. is $89,600.00 $176,300.00." So Pay section. Benefits: "CGI's benefits are offered to eligible professionals on their first day of employment to include: Competitive compensation Comprehensive insurance options Matching contributions through the 401(k) plan and the share purchase plan Paid time off for vacation, holidays, and sick time Paid parental leave Learning opportunities and tuition assistance Wellness and Well-being programs" Schedule: The posting says "This is a Full-Time, On-Site employment opportunity located in Jacksonville, FL in a Hybrid Model." That gives schedule: Full-Time, On-Site, Hybrid Model. So we can include Schedule. We also have "About the role" maybe we can use that heading. We need to avoid repeating job title as heading. No Job ID. We need to remove boilerplate: EEO, accommodations, etc. Remove all that. We need to preserve all substantive info. We need to use

• for any list of duties/requirements/benefits. We need to use

  for prose. We need to include sections only when posting has real specific content. Thus sections: About the role (prose), Responsibilities (list), Requirements (maybe combine qualifications?), Qualifications (maybe same as Requirements?), Skills (maybe not explicit separate), Benefits (list), Pay (prose or maybe just numbers), Schedule (prose). We need to decide headings: The instruction says use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can use those exact headings if content exists. We have content for About the role (the initial paragraph). Responsibilities (the bullet list under "Your future duties and responsibilities"). Requirements (maybe the qualifications list). Qualifications (maybe same as Requirements? Could combine but we need separate if content distinct). The posting has "Required Qualifications To Be Successful In This Role ..." which includes experience, education, etc. That's qualifications. Could treat as Qualifications. Requirements maybe could be same but we can put under Requirements the same list? Might be redundant. Better to have Requirements for the experience/education, and Qualifications maybe for skills? But there is no separate skills list. Could omit Skills section if no specific content. We have Benefits list. Pay: we have compensation range. Schedule: we have Full-Time, On-Site, Hybrid Model. Thus we will output:

  About the role

  ... (prose)

  Responsibilities

  • ...
  ...

  Qualifications

  • At least 9 years of experience as a Security Analyst or in a closely related cybersecurity role
  • Significant experience in Vulnerability Management, Cyber Security Operations, or Cyber Defense
  • Experience leading remediation programmed across large enterprise environments
  • Strong understanding of vulnerability scoring methodologies such as CVSS
  • Experience managing technology risk and remediation governance
  • Exposure to regulatory environments such as: NIST SP 800 40, DORA, FCA/PRA requirements, ISO 27001, NIST Cybersecurity Framework
  • Education: Bachelor's degree in computer science or related field
  We could also include Requirements but maybe not needed. However we have content for Requirements maybe same as Qualifications. To avoid duplication, we could omit Requirements. But the instruction says prefer a few substantive sections over many thin ones. So we could combine Requirements and Qualifications into one section called Qualifications (or Requirements). Since we have both headings available, but we should not create empty sections. We'll include Qualifications only. Benefits: list. Pay: maybe just a paragraph with the range. Schedule: paragraph. We must not include boilerplate like EEO etc. Let's extract the exact prose for About the role: The first paragraph up to "Hybrid Model." Let's copy: "The best version of us starts with You! We CGI is looking for passionate and detail-oriented Security Analysts to join our team supporting a leading global Banking client. The role involves vulnerability remediation and large-scale patch deployment following heightened regulatory focus on AI-enabled cyber threats. The initiative supports cyber hygiene, operational resilience and safe continuity of client’s business services. Selected candidates will lead the organization’s vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritized, remediated, and governed. The role is responsible for reducing cyber risk exposure by coordinating remediation efforts across infrastructure, cloud, application, and technology teams while ensuring compliance with internal policies, regulatory requirements, and remediation SLAs. This is a Full-Time, On-Site employment opportunity located in Jacksonville, FL in a Hybrid Model." We need to ensure we keep punctuation. Now Responsibilities bullet points: list from "Your future duties and responsibilities" onward until before "Required Qualifications". Let's capture each bullet: - Manage the end-to-end vulnerability response and remediation lifecycle, from identification and assessment through remediation, validation, and closure. - Prioritize vulnerabilities based on severity, exploitability, business criticality, asset exposure, threat intelligence, and potential business impact. - Lead and coordinate vulnerability remediation activities across infrastructure, application, cloud, network, and other technology teams. - Ensure Critical and High-risk vulnerabilities are remediated within established Service Level Agreements (SLAs) and organizational risk tolerances. - Drive accelerated response and remediation activities for actively exploited vulnerabilities, zero-day vulnerabilities, and emerging security threats. - Collaborate with technology and business stakeholders to track remediation progress, resolve blockers, and manage exceptions or risk acceptances where required. - Monitor vulnerability remediation performance and maintain accurate tracking, status updates, risk assessments, and remediation records. Now Qualifications: list from "Required Qualifications To Be Successful In This Role At least 9 years of experience as a Security Analyst or in a closely related cybersecurity role:" up to before compensation. Let's capture each bullet: - At least 9 years of experience as a Security Analyst or in a closely related cybersecurity role - Significant experience in Vulnerability Management, Cyber Security Operations, or Cyber Defense - Experience leading remediation programmed across large enterprise environments - Strong understanding of vulnerability scoring methodologies such as CVSS - Experience managing technology risk and remediation governance - Exposure to regulatory environments such as: NIST SP 800 40, DORA, FCA/PRA requirements, ISO 27001, NIST Cybersecurity Framework - Education: Bachelor's degree in computer science or related field Note: The original text had "Experience leading remediation programmed across large enterprise environments." maybe a typo but we keep. Now Benefits: list from "CGI's benefits are offered to eligible professionals on their first day of employment to include:" up to before "Together, as owners,". Let's capture: - Competitive compensation - Comprehensive insurance options - Matching contributions through the 401(k) plan and the share purchase plan - Paid time off for vacation, holidays, and sick time - Paid parental leave - Learning opportunities and tuition assistance - Wellness and Well-being programs Now Pay: "A reasonable estimate of the current range for this role in the U.S. is $89,600.00 $176,300.00." Note there is a missing space between numbers; we keep as is. Now Schedule: "This is a Full-Time, On-Site employment opportunity located in Jacksonville, FL in a Hybrid Model." Actually that sentence already appears in About the role. But we can still include Schedule section with that info. However we might duplicate. The instruction says preserve ALL substantive information; we can include it in both sections but maybe better to keep only in About the role and not duplicate. However Schedule section expects schedule info; we have it already in About the role. To avoid duplication, we could move the schedule info to Schedule section and remove from About the role? But we must preserve all info; we can keep it in both places but that duplicates. The instruction says do not invent or summarize away detail; duplication is not prohibited but might be considered redundant. It didn't forbid duplication. However we might want to avoid duplication to keep concise. But we need to include Schedule section only if posting has real specific content for it. The posting does have schedule info (Full-Time, On-Site, Hybrid Model). So we can include Schedule section with that sentence. We could keep About the role without that sentence to avoid duplication. Let's see if About the role still makes sense without that sentence. The About the role paragraph currently ends with "This is a Full-Time, On-Site employment opportunity located in Jacksonville, FL in a Hybrid Model." If we remove that, the paragraph ends at "...while ensuring compliance with internal policies, regulatory requirements, and remediation SLAs." That seems okay. Then we add Schedule section with that sentence. Thus About the role paragraph will be everything up to before that sentence. Let's extract: "The best version of us starts with You! We CGI is looking for passionate and detail-oriented Security Analysts to join our team supporting a leading global Banking client. The role involves vulnerability remediation and large-scale patch deployment following heightened regulatory focus on AI-enabled cyber threats. The initiative supports cyber hygiene, operational resilience and safe continuity of client’s business services. Selected candidates will lead the organization’s vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritized, remediated, and governed. The role is responsible for reducing cyber risk exposure by coordinating remediation efforts across infrastructure, cloud, application, and technology teams while ensuring compliance with internal policies, regulatory requirements, and remediation SLAs." Now Schedule section: "

  This is a Full-Time, On-Site employment opportunity located in Jacksonville, FL in a Hybrid Model.

  " Now Benefits section as list. Pay section: "

  A reasonable estimate of the current range for this role in the U.S. is $89,600.00 $176,300.00.

  " Now we need to ensure we don't include any boilerplate like EEO etc. We'll stop before that. Now output HTML fragment. Let's craft:

  About the role

  The best version of us starts with You! We CGI is looking for passionate and detail-oriented Security Analysts to join our team supporting a leading global Banking client. The role involves vulnerability remediation and large-scale patch deployment following heightened regulatory focus on AI-enabled cyber threats. The initiative supports cyber hygiene, operational resilience and safe continuity of client’s business services. Selected candidates will lead the organization’s vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritized