Senior Security Specialist

General

• Demonstrate strong security fundamentals while working hands-on with security technologies
• Follow ITIL best practices re: incident management, problem management, change management are more
• Complete deliverables and deliver solutions with the highest possible quality in the most efficient & effective manner
• Actively assess security risks and expedite closure of gaps to help promote a risk aware and proactive culture

• Provide input to security technology roadmaps that set the vision for security services / controls
• Research, evaluate and validate practicality of new technologies via rapid prototyping
• Design solutions that are “fit for purpose” (security function) and “fit for use” (enterprise grade)
• Ensure technical specifications support solution architecture and are endorsed by technology vendor(s)
• Deploy solution components and participate in appropriate functional and non-functional testing
• Work with internal and external stakeholder teams to implement / validate solution integration points
• Provide technical consulting on capabilities and limitations of the security technologies

Operations

• Participate in 24x7 on-call rotation, achieve incident service levels and participate in CIRT or MIR calls as requried
• Ensure security control health & compliance and assist with automation of manual tasks / improved proactive alerting
• Implement security policies / blocks and perform continuous tuning to ensure effectiveness of security controls
• Assist with key performance indicator reporting to reinforce the business value of our security controls
• Remediate infrastructure at risk of exploitation and participate in security incidents as needed
• Contribute to annual business continuity / disaster recovery planning and execution

Other

• Actively set personal smart goals and understands how their performance impacts the team
• Participate in meetings and training events with a willingness to share knowledge and learn from others
• Demonstrate commitment to respectful workplace and workplace diversity initiatives
• Foster the department’s culture with a focus on teamwork and stewardship with business units
• Support continual improvements of IS methods, tools and technique

• A degree or equivalent education in a related discipline such as Computer Science, Business Computing, Engineering, or Commerce is required
• Minimum of 5 years experience maintaining, designing, implementing end to end application, infrastructure, and security solutions in a large organization is required
• Broad knowledge of IT industry technology and best practices and specific knowledge in security and infrastructure technologies such as web servers, application servers, Intel / Linux / AIX servers, workstations, databases, network, IAM, Cloud Computing, Automation, FW’s / WAF / IPDS / DDOS, Cryptography, Endpoint Security, VPN, MFA, SIEM, Vulnerability Management, etc.
• Skilled and knowledgeable in capacity planning, disaster recovery planning, product/service lifecycles, service management and a strong focus on customer service
• Experienced in performance tuning complex infrastructure solutions; knowledge of performance and monitoring tools will be an asset
• Have attention to detail, be effective at planning, excellent analytical and problem-solving skills, self-organized and a demonstrated self-starter with the ability to influence others
• Strong leadership, communication, negotiation, and interpersonal skills with demonstrated experience working in a team environment is a must
• Demonstrated desire to implement change and make a contribution to the organization and with a proven history of making appropriate decisions and recommendations

• Expertise with SIEM technologies, SIEM architecture and SIEM best practices
• Familiarity or experience with Splunk, FluentD or Trellix is a bonus
• Security certifications such as CISSP, GCDA or equivalent
• Experience in Scripting / Automation (Powershell, Python, Ansible, Terraform etc)
• DevOps or Agile Experience