Security Specialist

Role Overview

We are looking for a hands-on Security Analyst to support and strengthen security operations during a period of organizational growth and leadership transition. This role will focus on ensuring that security tools are fully deployed, properly configured, actively monitored, and operating effectively across the environment.

The successful candidate will work closely with internal teams to identify risks, monitor security events, close open remediation items, and improve the overall security posture. This position is suited to a security professional who is comfortable working across security operations, incident response, vulnerability management, and security engineering activities.

Key Responsibilities

• Monitor, investigate, and respond to security alerts, incidents, and threats across the organization.
• Administer, tune, and optimize endpoint detection and response tools.
• Perform vulnerability assessments and coordinate the closure of remediation items.
• Configure, review, and maintain firewall and VPN security policies.
• Support identity and access controls, including user access reviews and privileged access management.
• Perform alert triage, incident investigation, and incident response activities.
• Document investigation findings, remediation actions, procedures, and operational runbooks.
• Ensure that security tools are fully deployed, monitored, and operating as intended.
• Support security initiatives related to protecting sensitive business, customer, and patient information.
• Collaborate with infrastructure and operations teams to improve security controls and reduce risk.

Required Qualifications

• 7+ years of experience in security operations, cybersecurity, or security engineering.
• Experience supporting security operations in a regulated or multi-site environment is preferred.
• Hands-on experience with endpoint detection and response, vulnerability management, firewall policies, and identity and access controls.
• Experience performing security alert triage and incident response.
• Ability to create and maintain clear security documentation and operational runbooks.

Core Technologies

• CrowdStrike Falcon
• Fortinet, including FortiGate firewalls and VPN
• Microsoft Defender and Microsoft Entra ID
• Microsoft 365 security
• Azure security tools
• Backup and recovery platforms such as Datto

Relevant Certifications

• CrowdStrike CCFA or CCFR
• Fortinet NSE 4 or FCP
• Microsoft SC-200 or AZ-500
• CompTIA Security+ or CySA+
• GIAC GSEC or GCIH

Preferred Experience

Experience protecting patient information or other sensitive data, including familiarity with HIPAA or PIPEDA, is a strong plus.