Senior Cyber Security Specialist

A college diploma or university degree in Computer Science, Information Security, Information Technology, Cybersecurity, Engineering, or a related discipline, or an equivalent combination of education and experience.

A minimum of 6 to 9 years of progressive cybersecurity experience, including significant experience in security operations, incident response, SIEM administration, threat management, network security, or cyber defence.

Hands-on experience administering and optimizing Microsoft Sentinel SIEM, including analytics rules, automation workflows, workbooks, dashboards, data connectors, and detection use cases.

Experience with Microsoft Defender XDR and related capabilities, including Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Defender for Cloud.

Hands-on experience administering enterprise firewall platforms such as Palo Alto, Fortinet, Cisco, Check Point, or equivalent technologies, including policies, security zones, NAT, VPN, segmentation, access controls, and rule lifecycle management.

Strong knowledge of network security principles, including TCP/IP, routing, switching, DNS security, IDS/IPS, secure remote access, network segmentation, and Zero Trust architectures.

Experience administering Microsoft Defender for Office 365, Exchange Online Protection, Mimecast, Proofpoint, Barracuda, or equivalent email security platforms, including policies, quarantine, block and allow lists, and threat protection rules.

Experience investigating phishing, business email compromise, spoofing, malware delivery, malicious network traffic, and other network- or email-borne threats.

Knowledge of cybersecurity incident response, digital forensics, threat intelligence, evidence handling, vulnerability management, and email authentication technologies including SPF, DKIM, and DMARC; certifications such as CISSP, GCIH, GCIA, SC-200, AZ-500, Security+, PCNSA/PCNSE, etc.

Fluency in English is required; French is an asset.

Participation in an on-call cybersecurity incident response rotation may be required.

Occasional work outside regular business hours may be required to support security incidents, investigations, maintenance activities, or emergency responses.

Work involves managing multiple priorities and responding to rapidly evolving cybersecurity threats in a dynamic environment.

Limited travel may be required for organizational meetings, training, emergency response support, or security-related activities.

As we work with and support people and communities in Canada and around the world, applicants whose first language is not English may be required to perform the responsibilities of the role in English.

Eligibility to work in Canada: At this time, we welcome applications from candidates eligible to work in Canada. If you are not a citizen or permanent resident of Canada, carefully review your visa to determine whether you are eligible to work in the role.

If selected for this role, you will be required to complete a successful pre-employment screening process, including a satisfactory Enhanced Police Information Check (E-PIC).