Senior Infrastructure Security Specialist

Infrastructure Security

• Provide security expertise for infrastructure cloud environments networks systems databases and identity technologies
• Review architectures and infrastructure changes to identify risks and recommend practical controls
• Develop secure configuration and hardening standards based on CIS Benchmarks NIST guidance and industry best practices
• Support network security controls including firewalls segmentation secure remote access and intrusion detection and prevention
• Partner with IT and Engineering to incorporate security into infrastructure design and operations

Vulnerability Management

• Own Keplers infrastructure vulnerability management program
• Manage authenticated scanning validate coverage assess findings and prioritize remediation based on risk
• Coordinate remediation with system owners and track vulnerabilities through resolution or approved risk acceptance
• Measure vulnerability exposure remediation performance scanning coverage and exceptions
• Administer platforms such as Tenable or equivalent technologies

Security Monitoring and Endpoint Protection

• Own and improve Keplers SIEM security monitoring and EDR/XDR capabilities
• Integrate log sources and develop detection use cases across infrastructure cloud applications identity and security tools
• Monitor logging coverage platform health and detection effectiveness
• Investigate security alerts and support containment remediation and recovery
• Coordinate investigations and service improvements with Keplers MDR/SOC provider
• Administer platforms such as Securonix SentinelOne or comparable technologies

Incident Response Cloud and Automation

• Support incident investigations involving infrastructure endpoints networks identity and cloud environments
• Analyze security telemetry collect evidence and coordinate containment and recovery
• Assess and improve security controls within AWS and/or Microsoft Azure
• Identify opportunities to automate monitoring vulnerability management and security operations using scripts APIs and security tools

Government and Regulated Environments

• Implement technical controls for Government of Canada and other regulated environments
• Support audits security assessments inspections certifications and remediation activities
• Maintain documentation and evidence demonstrating that required security controls are operating effectively

• Seven or more years of cybersecurity experience in infrastructure security security engineering or security operations
• Strong knowledge of Windows Linux networking cloud platforms and enterprise IT security
• Strong hands-on experience administering and operating vulnerability management SIEM/security monitoring and EDR/XDR technologies
• Experience investigating and responding to cybersecurity incidents
• Knowledge of network security infrastructure hardening identity and access management privileged access and least-privilege principles
• Experience securing AWS and/or Microsoft Azure environments
• Familiarity with NIST CSF NIST SP 800-171 NIST SP 800-53 and CIS Controls and Benchmarks
• Ability to communicate technical risks and recommendations to technical and non-technical stakeholders
• Strong ownership problem-solving organization and cross-functional collaboration skills
• Ability to obtain and maintain an appropriate Government of Canada security clearance
• Demonstrates a willingness to adopt and effectively utilize AI-assisted engineering tools applying sound judgment to improve productivity quality and innovation while continuously adapting to evolving technologies

• Experience with Tenable Securonix SentinelOne or comparable platforms
• Experience working with an MDR MSSP or SOC provider
• Experience supporting Government of Canada contracts or environments handling Protected or Classified information
• Familiarity with ITSG-33 ITSP.10.171 the Canadian Program for Cyber Security Certification and the Contract Security Program
• Experience with security audits compliance activities Python PowerShell Bash APIs or infrastructure as code
• Relevant certification such as CISSP GIAC CCSP Security CISM or CISA
• Relevant degree or an equivalent combination of education and professional experience

You will strengthen Keplers infrastructure security without unnecessarily slowing the business. Vulnerabilities will be effectively remediated monitoring will provide appropriate visibility incidents will be investigated quickly and environments supporting sensitive government programs will meet applicable security requirements.