Senior Cyber Security Specialist

Compensation Range (CAD) $78,699 - $83,618

Title: Senior Cyber Security Specialist - Technology Group

Employee Working

Location:

Partially Virtual / Hybrid (Canada)

Employment Status: Permanent Full-time

The Canadian Red Cross (Red Cross) - an inspirational not for profit organization, helps people and communities in Canada and around the world in times of need and supports them in strengthening their resilience. As one of Canada's Best Employers 2026
, we are committed to having an accessible, diverse, inclusive, and barrier-free work environment.

Monitor, analyze, and respond to cybersecurity threats and security events across the organization using enterprise monitoring and detection capabilities.

Lead cybersecurity incident investigation, containment, eradication, recovery, stakeholder coordination, and post-incident improvement activities.

Administer and continuously improve Microsoft Sentinel SIEM, including data connectors, analytics rules, watchlists, automation playbooks, workbooks, dashboards, and threat detection use cases.

Monitor and triage alerts from Microsoft Defender XDR, cloud, identity, endpoint, network, and other security technologies to identify malicious activity and reduce organizational risk.

Administer, monitor, and optimize enterprise firewall and network security technologies, including firewall policies, security zones, network segmentation, NAT, VPN, IDS/IPS, access controls, rule reviews, and configuration management.

Investigate and respond to network-based threats, intrusion attempts, malicious traffic, and security events identified through firewall, IDS/IPS, endpoint protection, and SIEM technologies.

Administer and maintain Microsoft Defender for Office 365, Exchange Online Protection, and related email security capabilities to protect against phishing, malware, spoofing, and business email compromise.

Develop and maintain email security policies, threat protection rules, block and allow lists, quarantine processes, secure mail routing, and domain protection controls including SPF, DKIM, and DMARC.

Coordinate vulnerability management activities, including risk-based prioritization, remediation tracking, exception management, reporting, and validation of technical security controls.

Support threat hunting, security architecture reviews, tabletop exercises, operational metrics, playbooks, lessons-learned reviews, and continuous improvement of cyber defence capabilities.

A college diploma or university degree in Computer Science, Information Security, Information Technology, Cybersecurity, Engineering, or a related discipline, or an equivalent combination of education and experience.

A minimum of 6 to 9 years of progressive cybersecurity experience, including significant experience in security operations, incident response, SIEM administration, threat management, network security, or cyber defence.

Hands-on experience administering and optimizing Microsoft Sentinel SIEM, including analytics rules, automation workflows, workbooks, dashboards, data connectors, and detection use cases.

Experience with Microsoft Defender XDR and related capabilities, including Defender for Endpoint, Defender for Identity,

Hands-on experience administering enterprise firewall platforms such as Palo Alto, Fortinet, Cisco, Check Point, or equivalent technologies, including policies, security zones, NAT, VPN, segmentation, access controls, and rule lifecycle management.

Strong knowledge of network security principles, including TCP/IP, routing, switching, DNS security, IDS/IPS, secure remote access, network segmentation, and Zero Trust architectures.

Experience administering Microsoft Defender for Office 365, Exchange Online Protection, Mimecast,…