Job ID: Job Title: Cybersecurity Specialist Duration: 12+ Months (with possible extension) Role Purpose We are looking for a Senior Specialist to own the end-to-end security posture of our organization. This is not a "maintenance" role; it is a high-level engineering position focused on building automated defense-in-depth strategies, hardening CI/CD pipelines, and architecting zero-trust frameworks. You will serve as the technical authority for our Toronto operations, ensuring that security is integrated into the fabric of our product development lifecycle. Advanced Technical Responsibilities Security Architecture: Design and implement a Zero-Trust Architecture (ZTA) across on-prem and multi-cloud environments (AWS/Azure). DevSecOps Integration: Embed automated security testing (SAST/DAST/SCA) into the GitLab/GitHub CI/CD pipelines to achieve "Shift Left" security. Threat Hunting & Intelligence: Proactively identify sophisticated threats using MITRE ATT&CK frameworks; develop custom detection logic in KQL or Python for SIEM/SOAR platforms. Advanced Cryptography: Oversee PKI management, TLS/SSL termination, and data-at-rest encryption strategies using HSMs or Cloud KMS. Automation: Replace manual workflows with code—scripting automated incident containment via Python, Go, or PowerShell. Technical Stack & Requirements Experience: 8+ years in IT Security, with at least 3 years in a Senior or Lead capacity. Cloud Mastery: Expert-level configuration of cloud-native security (e.g., AWS Guard Duty, SCPs, Azure Conditional Access, Sentinel). Networking: Deep understanding of BGP, SD-WAN security, micro-segmentation, and VPC peering. Compliance Leadership: Proven track record of mapping technical controls to NIST CSF , ISO 27001 , and OSFI (if in Finance) requirements. Certifications (Any 2 REQUIRED) CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) OSCP (Offensive Security Certified Professional) CISM (Certified Information Security Manager) #J-18808-Ljbffr