Job Description

Location Address: 888 Birchmount Road 6th Floor, Scarborough
Hybrid: 2 days/week in office (there is some flexibility to WFH if preferred), but this may change to 4 times/week strong preference for candidates in GTA
Contract Duration: 1 year

Typical Day in Role:

• Works as part of Cyber Automation & Defense (CAD) team and will be responsible for identifying security exposures in the organizations network and advise on appropriate compensating controls. Works with other technology and security teams to develop use cases and implement controls needed to close exposures. The intent of the use cases is to detect and alert for security events.
• Thrives in a fast-paced environment coordinating multiple issues and threats that can be occurring simultaneously
• Solutions for multiple security domains (Security Management, Security Engineering, Identity and Access Management, etc.).
• Works on different types of projects (from large complex to simple)
• Collaborates with various business lines, IT support functions and IS&C Control function
• Analyze security exposures and identify the remedial and compensating factors in the organizations network.
• Advise on appropriate implementation of compensating controls including priority and success criteria.
• Work with other technology and security teams to implement controls needed to close exposures.

Candidate Requirements/Must Have Skills:
1) 8+ years of hands-on technical working experience in management of security threats and use case development based on MITRE Framework
2) 2+ years experience in Google Security Command Centre (preferred) or Microsoft Defender
3) 2+ years experience building XDR content, securing databases/AIX/Unix/Linux/Mac
4) 2+ Experience building and running a TTTP framework methodology for pattern and behavior-based content development
5) 2+ years combined experience with involving red team (Vulnerability Assessments, Web app assessments), consulting (Compliance, policy creation), SOC and Device Management

Nice-To-Have Skills:

• Bilingual in Spanish is a strong asset
• Experience conducting security research
• Experience with having sized, deployed, maintained, and hardened SIEM and NGFW solutions

Education:

• Post-secondary education in Computer Science or in a related field
• Certifications (CISSP, CISM, CCSP, CRISC) are nice to have

LanceSoft