Senior Specialist - Cybersecurity

The Senior Security Specialist is responsible for supporting and enhancing the organization's cybersecurity operations through proactive threat detection, incident response, vulnerability management, and risk assessment activities. This role works closely with technical teams, business stakeholders, and technology partners to identify security risks, respond to security incidents, implement security controls, and continuously improve the organization's security posture.

The successful candidate will leverage industry frameworks, security technologies, and analytical expertise to protect enterprise systems, applications, networks, and data from evolving cyber threats.

• Serve as a security subject matter expert supporting security operations, incident response, vulnerability management, and cyber risk assessment initiatives across the organization.
• Monitor and analyze security events, alerts, logs, and threat intelligence sources to identify potential threats, suspicious activity, and indicators of compromise.
• Lead or coordinate incident response activities, including investigation, containment, eradication, recovery, root cause analysis, and post-incident reporting.
• Conduct detailed investigations of cybersecurity incidents and provide timely recommendations to reduce risk and prevent recurrence.
• Support the ongoing operation and optimization of security monitoring and detection capabilities, including SIEM, EDR/XDR, IDS/IPS, email security, and other security platforms.
• Manage vulnerability management activities, including vulnerability assessments, prioritization, remediation tracking, validation, and reporting.
• Partner with infrastructure, application, and business teams to ensure timely remediation of identified security vulnerabilities and risks.
• Conduct security risk assessments for applications, infrastructure, projects, third-party solutions, and technology initiatives, providing actionable recommendations to address identified risks.
• Perform security reviews of existing and emerging technologies to ensure compliance with organizational security standards, policies, and regulatory requirements.
• Prepare reports, findings, and recommendations related to security incidents, vulnerabilities, risk assessments, and security posture improvement initiatives.
• Research emerging cyber threats, attack techniques, vulnerabilities, and security technologies, applying insights to strengthen organizational defenses.
• Develop, maintain, and improve security procedures, standards, playbooks, and operational documentation to support effective security operations.
• Participate in security audits, compliance assessments, and control reviews to ensure adherence to security and regulatory requirements.
• Collaborate with cross-functional teams to implement security controls and operational improvements that reduce organizational risk and improve resilience.
• Support continuous improvement initiatives that enhance threat detection, incident response effectiveness, vulnerability management processes, and overall security operations maturity.

• Bachelor's degree in computer science, Information Security, Information Technology, or a related field.
• Relevant industry certifications such as Security+, GSEC, GCIH, CISSP, CISM, GIAC, CCSP, or equivalent certifications are considered an asset.

• 3-5 years of experience in Cybersecurity, Security Operations, Incident Response, Vulnerability Management, Risk Assessment, or a related information security discipline.
• Experience monitoring, investigating, and responding to cybersecurity incidents within enterprise environments.
• Experience coordinating vulnerability management activities, including remediation prioritization, stakeholder engagement, and reporting.
• Knowledge of security frameworks and standards, including NIST, CIS Controls, and OWASP.
• Experience conducting security risk assessments and developing practical risk mitigation recommendations.
• Hands-on experience with security technologies such as SIEM, EDR/XDR, email security platforms, vulnerability scanners, and security monitoring tools.
• Familiarity with threat detection methodologies, incident response processes, and cyber threat intelligence concepts.
• Strong analytical, investigative, and troubleshooting skills with the ability to assess security risks and recommend appropriate corrective actions.
• Ability to communicate technical security concepts effectively to both technical and non-technical…