Security Specialist - Intermediate

Job Title: Security Specialist - Intermediate

Duration: 8 months (Nov 29, 2026 to Aug 9, 2027)

Must Haves

• Minimum 5–8 years of experience in cyber security, with extensive exposure to security operations and vulnerability management or devSecOps programs
• Proven experience developing and executing a continuous threat exposure management or advanced vulnerability management program (e.g., CTEM), including continuous discovery of exposures, threat scenario analysis, attack-path mapping, and risk-based prioritization of remediation actions.
• Deep DevSecOps experience, with hands-on implementation of secure CI/CD pipeline practices (integrating SAST, DAST, SCA, IaC security scanning, container security scans) in collaboration with development/DevOps teams.
• Strong cloud security expertise across AWS and Azure, including practical knowledge of cloud-native security controls (IAM, network security groups, logging/monitoring, encryption) and cloud threat detection services (e.g., AWS GuardDuty, Azure Defender/Sentinel).
• In-depth experience operating a Cloud Security Posture Management (CSPM) or CNAPP solution (e.g., Prisma Cloud or similar) to continually assess and improve cloud posture.
• Excellent written and verbal communication skills, with the ability to produce clear technical documentation, reports, and executive-level summaries.
• Continuous Threat Exposure Management and Vulnerability Management: Hands-on experience running programs that continuously identify and mitigate security exposures, aligning closely with organizational risk tolerance.
• DevSecOps and Secure SDLC: Proven ability to implement and manage security controls within CI/CD pipelines, and to work with DevOps tools and processes (source control, CI servers, container platforms, etc.) to improve software security.
• Cloud Security (AWS & Azure): In-depth hands-on knowledge of securing cloud environments, including identity management, network security, monitoring (CloudTrail, CloudWatch, Azure Monitor), and secure configuration of cloud services.
• CSPM/CNAPP Solutions: Operational experience with cloud security posture management platforms, and the ability to configure and tune these tools to an organization's environment and policies.
• Demonstrated experience establishing or significantly contributing to a CTEM or continuous vulnerability management program.
• Hands-on experience integrating security into CI/CD pipelines (implementing SAST, DAST, container security, etc.).
• Strong experience with AWS and Azure security controls and best practices.
• Proven operation of a CSPM or CNAPP platform (e.g., configuring rules, analyzing findings, managing remediation workflows).

Description / Responsibilities / Skills

Description

• This role is explicitly hands-on and operational.
• The resource will be expected to work across teams (SOC, DevOps, cloud engineering, etc.) to implement and execute, rather than only providing recommendations.

a. CTEM & Exposure Management:

• Perform day-to-day threat analysis leveraging multiple threat intelligence sources, vulnerability disclosures, emerging cyber threat trends, and security advisories to assess organizational impact and drive risk-based response and remediation activities.

b. DevSecOps & Cloud Security Operations:

• Secure Coding & Remediation Support: Provide guidance and best practices to development teams on resolving vulnerabilities identified through pipeline scans.
• Cloud Risk Remediation & Integration: Work with cloud engineering and operations teams to remediate identified cloud risks

Deliverables

• DevSecOps Findings & Metrics: Deliver periodic summaries of vulnerabilities detected in pipelines, highlighting trends (e.g., common weakness types in code or configurations) and improvements over time as DevSecOps practices mature.
• Secure Development Standards & Training Materials: Develop or update secure coding and DevSecOps best-practice documents tailored to OH's development environment.
• Cloud Security Assessment & Gap Analysis: Conduct an initial end-to-end cloud security posture assessment of OH's AWS and Azure environments.
• CSPM/CNAPP Implementation: Fully deploy and configure the CSPM/CNAPP platform for multi-cloud coverage.

Experience & Skill Set Requirements

Demonstrated ability to

• Design and implement complex security solutions and processes, ensuring they are effectively integrated into everyday operations (e.g., implementing CTEM processes and ensuring follow-through; integrating new security tools so they are used consistently by teams).
• Perform risk-based analysis and prioritization, evaluating where to focus security resources for maximum impact and articulating the rationale to stakeholders.
• Collaborate across multidisciplinary teams (security, IT, DevOps, cloud, business) to drive security initiatives, overcoming silos and aligning efforts with organizational objectives.
• Communicate complex security issues and solutions clearly, adjusting the level of detail for technical teams versus leadership or non-technical stakeholders.

Solid understanding of

• Modern cyber threat landscape and attack vectors
• Security architecture principles in both on-premises and cloud environments

Core competencies

• Strong focus on execution, delivery, and measurable outcomes
• Strong analytical and problem-solving skills, enabling the resource to dissect complex security problems, identify root causes, and develop creative solutions.
• Execution and delivery focus, demonstrating a bias toward action and results – setting clear goals, meeting deadlines, and delivering high-quality outputs that measurably improve security posture.
• Adaptability and continuous learning, staying current with emerging threats, new security technologies, and best practices, and quickly adjusting approaches as the environment evolves.
• Teamwork and mentorship, working well within team settings, sharing knowledge, and helping to upskill internal team members throughout the engagement.

Required Experience: 2.DevSecOps & Application Security Experience

• Experience collaborating with development/DevOps teams to remediate security issues and improve secure coding practices.
• Familiarity with infrastructure-as-code (IaC) and managing security in containerized or cloud-native application environments.

Required Experience: 3.Cloud Security & CSPM Operations

• Ability to align cloud security initiatives with overall security program and compliance requirements.

Desired Skills

• Experience in healthcare or public sector environments, particularly Ontario health sector
• Prior exposure to or participation in threat intelligence and threat hunting activities.
• Knowledge of modern containerization and cloud-native application development practices, including Kubernetes security and microservices architecture, as a plus.
• Relevant certifications (e.g., CISSP, CISM, GIAC, Azure Security Engineer)

Project Description / Background (AI requirement)

• Demonstrated hands-on experience using Security Copilot and security automation agents to support CTEM execution, including AI-assisted threat analysis, correlation of exposure data, attack‑path analysis, and validation of exploitability