Senior IT Security Specialist

Electric Mind

. Deploy, manage and tune next-generation firewalls, including rule reviews, segmentation and change control .

Posted 11/6/2026full-timeToronto • CanadaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT security with a focus on firewall management, intrusion prevention, and compliance frameworks. Proficient in conducting penetration tests, managing data loss prevention, and implementing security policies across various environments.

Highest-signal resume keywords

Firewall ManagementIntrusion Prevention SystemsData Loss PreventionPenetration TestingCompliance Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Firewall ConfigurationIntrusion PreventionEnterprise WiFi SecurityDLP Administration2FA/MFA DeploymentSAST ToolsDAST ToolsTCP/IPActive DirectoryLinux Systems

Soft Skills

Clear CommunicationMentoringIncident Response

Tools & Technologies

Palo Alto NetworksSIEM PlatformsDevSecOpsZero Trust ArchitectureSecure Remote Access

Certifications & Qualifications

CISSPCISMCompTIA Security+OSCPCEHPCNSEAWS Security SpecialtyAzure Security Engineer (AZ-500)CCSP

Industry Keywords

ISO 27001SOC 2NIST CSFPCI DSSRisk AssessmentsSecurity PoliciesChange ControlVulnerability TestingAudit PreparationSecurity Awareness Training

Tech Stack

Tools & technologies

AWSAzureCloudFirewallsLinuxTCP/IP

About the role

Key responsibilities & impact

Deploy, manage and tune next-generation firewalls, including rule reviews, segmentation and change control
Operate and tune intrusion prevention systems, investigate alerts and reduce false positives
Secure enterprise WiFi using WPA3/802.1X authentication, rogue access point detection and guest network isolation
Administer antivirus and endpoint protection across servers and workstations and respond to detections
Manage anti-spam and email security controls, including phishing filtering, SPF, DKIM and DMARC
Own data loss prevention policies across email, endpoints and cloud storage and handle policy incidents
Run 2FA/MFA rollout, enforcement and exception management
Plan and conduct penetration tests and coordinate third-party penetration tests
Integrate SAST and DAST application security testing into development pipelines
Triage findings with development teams, track remediation and verify fixes
Maintain controls and evidence for ISO 27001, SOC 2, NIST CSF, PCI DSS and applicable privacy laws
Prepare for and support internal and external audits, client security questionnaires and risk assessments
Write and update security policies, standards and procedures
Participate in incident response, including investigation, containment and post-incident reviews
Mentor junior team members and deliver security awareness training
Report security posture, metrics and risks to IT leadership
Protect networks, endpoints, applications and cloud environments while leading vulnerability testing and compliance programs

Requirements

What you’ll need

5 to 10 plus years of experience in IT security, with significant time in security and compliance roles
Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems
Practical experience securing enterprise WiFi networks
Experience administering DLP, antivirus/endpoint protection and anti-spam/email security platforms
Experience deploying and supporting 2FA/MFA solutions
Proven ability to perform penetration testing and to run SAST and DAST tools, interpret results and drive remediation
Working knowledge of compliance frameworks such as ISO 27001, SOC 2, NIST CSF or PCI DSS and audit preparation
Solid understanding of TCP/IP, routing, VPNs, Active Directory/identity management, and Windows and Linux systems
Clear written and verbal communication, including explaining risk to non-technical audiences
Degree or diploma in Computer Science, Information Security or a related field, or equivalent experience
Certifications such as CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE, AWS Security Specialty, Azure Security Engineer (AZ-500) or CCSP are an asset
Nice-to-have experience with Palo Alto Networks firewalls managed through Panorama
Nice-to-have cloud security knowledge in AWS, Azure or Google Cloud
Nice-to-have experience with ITIL change management, SIEM platforms, DevSecOps, zero trust architecture and secure remote access

Benefits

Comp & perks

Full Time Permanent employment
Hybrid work arrangement
Inclusive workplace and accommodation during recruitment and selection
Opportunities to grow fast and collaborate with exceptional teammates
High-touch delivery model and client partnership culture