SOC Infrastructure Specialist

Introduction

As an IT Security Services Specialist - SOC Infrastructure, you will apply your cyber security knowledge and skills to defend our clients from increasingly complex and persistent cyber threats using our advanced security tools and platforms and following robust security operations processes and procedures. You will be working as part a team of security professionals in our Canada Security Operations Center (SOC) supporting the infrastructure to deliver managed security services.

Working with a team of security professionals from our SOC in Markham, Ontario, you will be involved in security deployment and integration activities, infrastructure project management, device management, policy management, security operations, infrastructure operations, and other security services related tasks.

• Primarily work as part of IBM SOC infrastructure team, operating, supporting, and maintaining the SOC infrastructure to serve our clients.
• Perform steady state management of various cloud and network security solutions such as next-gen firewalls, web application and API security, cloud DoS protection, local and edge network access security, cloud workload protection and posture management, etc.
• Work with the broader team to define and support security architecture, processes, procedures, governance, operations, and reporting of SOC IT infrastructure in a hybrid, multi-cloud, environment.
• Regularly review product announcements, advisories, and create remediation plans and implement to mitigate associated risks.
• Manage security vulnerabilities and perform patching and upgrades on security systems and platforms.
• Lead and participate in troubleshooting sessions to find root cause of issues and provide quick workarounds and timely resolutions within defined Service Level Agreements (SLAs).
• Perform all activities adhering to IBM and Client policies, processes and guidelines and contribute towards continuous improvements to the services.
• Follow IT service management processes including Change, Incident, and Problem Management.
• Participate in on-call rotations and perform change and incident management outside of normal shift hours, as required.
• Contribute towards team documentation efforts by creating and maintaining effective operational and technical documentation.
• Contribute to the SOC annual audit and compliance projects.
• Lead and procurement of software, hardware, and licensing for the SOC to operate.
• Work effectively as a team player and proactively identify and elevate to management any risks and opportunities in the managed services.
• Effectively interface with IBM governance teams, handle escalations related to the team’s services, and ensure high level of customer satisfaction.

• English Fluent (verbal and written).
• Min 8-10 years experience in a Network Security or Security Operations role
• Federal Government of Canada Secret security clearance (Level II) - or eligible to achieve security clearance.
• Extensive knowledge and expertise working with Fortinet suite of products including Forti Gate and Forti Web.
• Experience working with various operating systems including Windows, Linux, and Red Hat Open Shift.
• Experience handling security Incidents, Changes and Service Requests using IT Service Management tools (ITSM) and methodologies (ITIL).
• Solid understanding of other IT infrastructure areas such as networking (switches, routers) and servers.
• Broad knowledge and experience with cloud security solutions, using cloud native security controls and tools and solutions including IBM Cloud and Google Cloud Platform (GCP), or similar.
• Broad knowledge and experience with other security solutions in network/perimeter security, endpoint security, data and content security, encryption and identity and access management.
• Strong critical thinking and analytical skills.
• Work effectively as part of a team or independently to achieve business outcomes.

• Bachelor’s or master’s degree in computer science or information technology.
• Industry recognized security certifications. (E.g. CISSP, CCSP, CISM, CEH, Security+).
• Techni…