Senior Specialist, Cybersecurity (ON)

Position Summary:

Under the guidance of the Manager Cybersecurity Operationsthe Senior Cybersecurity Specialist is responsible for the day-to-day operation management and continuous improvement of the organizations cybersecurity tools and processes. This role is a key member of the Security Operations team actively monitoring triaging and responding to security alerts and incidents. The analyst plays a hands-on role in managing security infrastructure threat intelligence integration and ensuring the operational effectiveness of security controls.

Key Accountabilities:

Security Monitoring & Incident Response

Monitor analyze and triage security alerts from SIEM EDR firewall and other security platforms.
Perform Tier 2/3 incident response including threat containment eradication and recovery.
Conduct root cause analysis and post-incident reviews to inform improvements.
Contribute to the maintenance of incident response plans playbooks and response runbooks.

Cybersecurity Tool Management & Optimization:

Administer and tune cybersecurity tools (e.g. SIEM EDR vulnerability scanners DLP email security etc.).
Create and refine detection rules alerting thresholds and automated workflows.
Ensure tools are integrated effectively and function as intended across environments.
Collaborate with vendors and MSSPs (if applicable) to troubleshoot or enhance tool performance.

Vulnerability & Threat Management:

Perform vulnerability scans analyze results and coordinate remediation with infrastructure/application teams.
Support threat hunting activities and help identify stealthy or low-signal threats.
Stay informed about emerging threats vulnerabilities and attacker tactics (e.g. via MITRE ATT&CK threat intel feeds) ; Assist in developing metrics and dashboards to track security posture and risk exposure.

Documentation Reporting & Collaboration:

Maintain clear and accurate documentation including incident reports tool configurations and operational procedures.
Provide technical reporting and summaries for audits leadership and compliance.
Collaborate with IT compliance and business units to ensure security practices align with operational needs.
Mentor junior analysts and contribute to operational maturity initiatives within the security team.

Educational and Functional Requirements:

Minimum 5 years of hands-on experience in cybersecurity operations incident response or related IT security roles.
Post-secondary education in Information Technology Cybersecurity Computer Science or a suitable combination of education and experience.
Industry-recognized certifications such as CISSP CISM GCIH GCIA CompTIA CySA or equivalent are highly preferred.
Proven expertise in deploying and managing cybersecurity tools and infrastructure including SIEM EDR firewalls and vulnerability scanners.
Experience with operational cybersecurity tasks including threat detection log analysis system hardening patch management and network security controls.
Strong understanding of threat landscapes attack techniques (e.g. MITRE ATT&CK) and common security frameworks such as NIST ISO 27001 or CIS Controls.
Excellent communication and collaboration skills with a demonstrated ability to respond effectively to both technical and non-technical stakeholders.
Experience supporting audits and regulatory compliance processes is considered an asset.