Information Security Specialist

Fortinet; Nanaimo; On-site; USD 95,000 - 125,000; Full time

Job summary

An innovative firm is looking for a dynamic Security Operations Expert to enhance their SOC team's capabilities. This exciting position involves monitoring security incidents, conducting vulnerability assessments, and administering critical security tools. The ideal candidate will have extensive experience in incident response and threat detection, along with a strong analytical mindset. You will play a crucial role in refining workflows and improving security measures while contributing to a collaborative and forward-thinking environment. This position offers a competitive salary and comprehensive benefits, making it a fantastic opportunity for those passionate about cybersecurity.

Benefits

100% company paid medical coverage

Dental and vision coverage

Health Spending Account

Personal Spending Account

Employee & Family Assistance Plan

Critical illness insurance

Disability insurance

Life insurance

Group Registered Retirement Savings Plan (RRSP)

Competitive Paid Time Off

Qualifications

• 5+ years in security operations with hands-on experience in security tools.
• Strong understanding of detection engineering and compliance standards.

Responsibilities

• Monitor security incidents and conduct vulnerability assessments.
• Administer security tools and fine-tune detection rules.

Skills

Incident Response

Vulnerability Management

Log Analysis

Threat Detection

Analytical Skills

Communication Skills

Scripting (Python, PowerShell)

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Cybersecurity

Tools

FortiSOAR

FortiSIEM

FortiAnalyzer

FortiDeceptor

FortiGate

SIEM

SOAR

Job description

We are seeking a dynamic and highly skilled Security Operations Expert to join our SOC team, responsible for the security monitoring and management systems. This role encompasses incident response, vulnerability management, and administration of critical security tools. The ideal candidate will also fine-tune detection rules to enhance the effectiveness of incident detection and response workflows.

Key Responsibilities:

1. Monitor and respond to security incidents in alignment with incident response protocols.
2. Conduct vulnerability assessments and manage remediation efforts.
3. Perform log analysis, host-based, and network forensic investigations to identify threats.
4. Administer and maintain security tools such as SOAR, SIEM, Anti-Virus, and similar platforms.
5. Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy.
6. Analyze and improve security measures by assessing and updating policies, configurations, and procedures.
7. Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures (TTPs).
8. Develop comprehensive reports and presentations for both technical and non-technical audiences.
9. Contribute to the SOC’s continuous improvement by refining workflows, automation, and system integrations.

Qualifications:

1. Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
2. 5+ years of experience in security operations, incident response, threat detection and analysis, governance and compliance or similar.
3. Hands-on experience administering and configuring security tools such as FortiSOAR, FortiSIEM, FortiAnalyzer, FortiDeceptor, FortiGate and other Fortinet products. Understanding and building playbooks in SOAR in Json/Jinja experience is preferred.
4. Strong understanding of detection engineering, fine-tuning alerting rules, and managing SIEM/EDR and vulnerability management systems.
5. Proficiency in security frameworks and various compliance standards like ISO 27001, SOC, StateRAMP, FedRAMP, NIST, etc.
6. Familiarity with scripting (e.g., Python, PowerShell) for task automation and tool customization.
7. Strong analytical and troubleshooting skills for rapid issue resolution under pressure.
8. Excellent communication skills, both written and verbal, for technical and executive audiences.
9. Industry certifications such as CISSP, CISA, CRISC, CCSP, ISO 27001, or equivalent are highly preferred.

The Canada base salary range for this full-time position is expected to be between $95,000 - $125,000 annually. Wage ranges are based on various factors including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate’s subject knowledge, skill level, qualifications, and experience.

Fortinet strives to provide you and your family with a comprehensive benefits package. Benefits eligibility starts on your first day of hire and comprises of 100% company paid medical, dental, and vision coverage, including a Health Spending Account and a Personal Spending Account that gives you flexibility to spend where you need it the most. Our Employee & Family Assistance Plan (EFAP) offers you and your family access to various services like counseling, legal advice, mental health resources etc. We also provide critical illness, disability, and life insurance, as well as a Group Registered Retirement Savings Plan (RRSP) with a company match to help you save faster for retirement. We offer competitive Paid Time Off and flexible leave policies, including paid health days, to help you take care of yourself and your family members.

All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion.