Security Specialist

We are seeking a Senior Cybersecurity Specialist to address evolving digital challenges and ensure robust protection for mission-critical IT systems. This role is pivotal in safeguarding sensitive data, maintaining compliance with modern cybersecurity standards, and mitigating emerging threats during large-scale infrastructure modernization. The specialist will lead cybersecurity strategy development, risk assessment, and secure system integration, ensuring that enterprise platforms remain resilient and compliant throughout their lifecycle.

Pay Rate: $63.85-$70.51/Hr

Advantages
- Strategic Impact:
Lead the security vision for a major infrastructure modernization, ensuring long-term resilience against emerging threats.

- Technical Breadth:
Utilize a wide array of security technologies, from AI-driven threat analysis to complex cloud identity and access management.

- Professional Leadership:
Drive a culture of security by training internal teams and mentoring staff on Dev Sec Ops  best practices.

- Engagement Stability:
Benefit from a long-term contract in a highly structured and professional enterprise environment.

Responsibilities
- Cybersecurity Strategy:
Develop and refine enterprise security strategies aligned with the modernization of legacy IT systems and cloud transitions.

- Risk & Vulnerability Management:
Conduct internal risk assessments to identify vulnerabilities; prioritize threats and design mitigation strategies featuring both preventive and detective controls.

- Incident Response:
Develop and maintain incident response plans to address potential breaches and ensure business continuity.

- Secure Architecture:
Work closely with architects and developers to embed security into system design, effectively reducing attack surfaces in cloud-based (Azure/AWS) and on-premises solutions.

- Compliance & Policy:
Ensure systems meet regulatory standards and privacy legislation; update internal security policies to align with broader mandates and data protection laws.

- Advanced Monitoring:
Implement tools for continuous monitoring and advanced threat detection; evaluate the use of AI/ML techniques for predictive threat analysis.

- Dev Sec Ops  Integration:
Promote modern software development methodologies, integrating security into Agile, CI/CD, and Dev Ops pipelines.

- Training & Awareness:
Conduct cybersecurity awareness training focusing on phishing prevention, password hygiene, and the safe handling of sensitive information.

Qualifications
- Cybersecurity Seniority:
Minimum 8 years of experience in cybersecurity risk assessment, mitigation, and compliance within enterprise-level IT environments.

- Privacy Expertise:
Minimum 5 years of experience with Privacy Impact Assessments (PIA) and a strong understanding of privacy legislation (e.g., Privacy Act, PIPEDA).

- Testing & Vulnerability:
Minimum 5 years of experience in vulnerability assessment and penetration testing, utilizing SAST, DAST, IAST, and SCA techniques.

- Tooling Proficiency:
Hands-on experience with tools such as Fortify, Web Inspect, Burp Suite, and SIEM platforms like Splunk.

- Access Management:

Experience with secret management and Privileged Access Management (PAM) using tools like Cyberark or Beyond Trust.

- Infrastructure Security:
Deep knowledge of OWASP secure coding, firewalls, Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and data encryption.

- Certifications:

Mandatory relevant certifications such as CISSP, CISM, or CRISC.

- Education:

BS in Computer Science, Engineering, or a related discipline.

Summary
If you are a Senior Cybersecurity Specialist with a passion for building secure, resilient architectures and a track record of successful risk mitigation, we encourage you to apply today!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep…