Lead Specialist, IT Cybersecurity

Sunoco LP; Calgary; On-site; CAD 120,000 - 190,000; Full time

Job summary

Sunoco LP is seeking a senior security professional to protect the organization's technology environment through security operations, incident response, vulnerability management, and network security practices. You will act as a trusted advisor and partner with technology and business teams to implement secure, business-aligned solutions.

The role requires deep technical expertise across security operations, network security, and monitoring, with hands-on experience in SIEM, EDR/XDR, firewalls,

Qualifications

• Bachelor’s degree in computer science or cybersecurity, with 5–8 years of related experience.
• Strong knowledge of NIST, CIS Controls, OWASP.
• Experience in incident response and post-incident analysis.
• Hands-on with security tools (firewalls, SIEM, EDR) and cloud services.
• Ability to communicate risks to technical and non-technical audiences.

Responsibilities

• Lead security incidents from detection to remediation.
• Monitor security events and threat intelligence to identify risks.
• Design and optimize network security controls and WAF/ proxies.
• Perform vulnerability assessments and coordinate remediation.
• Collaborate with IT and business teams on secure solutions.
• Develop security monitoring use cases and response playbooks.

Skills

Security operations

Incident response

Vulnerability management

Network security

Threat hunting

Python/PowerShell scripting

Education

Bachelor's degree in Computer Science

Cybersecurity or Information Security

CISSP or GCIH certification

Tools

SIEM

EDR/XDR

Firewalls

WAF

IDS/IPS

Proxies

Job description

Parkland is a leading international fuel supplier, convenience store operator, and community enabler, serving diverse customers across 26 countries.

Brief Description

Serve as a senior security professional and trusted advisor responsible for protecting the organization's technology environment through effective security operations, incident response, vulnerability management, and network security practices.

As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation. For more information, please visit www.sunocolp.com.

Sunoco LP is a leading energy infrastructure and fuel distribution master limited partnership operating across 32 countries and territories in North America, the Greater Caribbean, and Europe. The Partnership’s midstream operations include an extensive network of approximately 14,000 miles of pipeline and over 160 terminals. This critical infrastructure complements the Partnership’s fuel distribution operations, which distribute over 15 billion gallons annually to approximately 11,000 Sunoco and partner-branded retail locations, as well as independent dealers and commercial customers.

At Sunoco, we take great pride in what we do and wholeheartedly believe our employees drive success for our company and our customers. We are always looking for the best and brightest talent and are committed to making your job a challenging and rewarding experience.

• A place where you can take your career in the direction you want to grow and go

The Opportunity

Serve as a senior security professional and trusted advisor responsible for protecting the organization's technology environment through effective security operations, incident response, vulnerability management, and network security practices. You will play a key role in identifying, investigating, and mitigating cyber threats while partnering with technology and business teams to implement secure, business-aligned solutions. This role requires deep technical expertise across security operations, network security technologies, and security monitoring capabilities.

Responsibilities

• Serve as a senior technical consultant, ensuring security controls, system designs, and technology implementations align with business objectives, architectural standards, and security requirements.
• Lead the investigation, analysis, containment, and remediation of complex security incidents and emerging threats.
• Monitor and safeguard network and security infrastructure by analyzing security events, network traffic, threat intelligence, and suspicious activity to identify potential security risks.
• Perform advanced threat hunting and security investigations to proactively identify malicious activity and strengthen detection capabilities.
• Design, implement, maintain, and optimize network security controls, including firewalls, web application firewalls (WAF), proxy solutions, and related security technologies.
• Lead vulnerability management activities, including vulnerability analysis, risk prioritization, remediation recommendations, and validation of corrective actions.
• Conduct risk evaluations for infrastructure, applications, cloud services, and technology projects.
• Collaborate with stakeholders to define business and technical requirements and translate them into secure, practical solutions.
• Participate in security projects and initiatives, ensuring security requirements are incorporated throughout implementation and delivery.
• Develop and enhance security monitoring use cases, detection logic, and operational processes to improve threat detection and response effectiveness.
• Stay current on emerging threats, attack techniques, vulnerabilities, and security technologies, applying industry knowledge to strengthen the organization's security posture.

Education

• Bachelor’s degree in computer science, Information Security, Cybersecurity, or a related discipline. Equivalent combination of education and experience may be considered.
• Typically requires 5-8 years of experience in cybersecurity, information security, security operations, network security, or related disciplines.
• Industry recognized certifications such as CISSP, GCIH.

Requirements

• Advanced knowledge of the NIST Cybersecurity Framework, OWASP, CIS Controls, and industry security best practices.
• Extensive experience in incident response, including investigation, containment, remediation, and post-incident analysis.
• Strong experience with vulnerability management processes, tools, and remediation practices.
• Hands-on expertise managing and supporting network security technologies, including firewalls, WAFs, proxies, IDS/IPS, and network detection technologies.
• Experience working with SIEM, EDR/XDR, email security, vulnerability management platforms, and other enterprise security solutions.
• Strong understanding of network protocols, routing, segmentation, ports, packet analysis, and network traffic investigation.
• Experience analyzing security events and threat intelligence to identify and respond to cyber threats.
• Proven ability to assess security risks, identify control gaps, and recommend practical remediation strategies.
• Strong technical troubleshooting and analytical skills with the ability to solve complex security challenges across multiple technologies.
• Strong verbal and written communication skills with the ability to communicate security risks and recommendations to technical and non-technical audiences.
• Experience with Python, PowerShell, or other scripting languages for automation and security operations is considered an asset.
• 5-day-per-week, in-office requirement.

Humble. Hungry. Smart. Does this sound like you?

Do others describe you as being a down-to-earth achiever? Someone who thinks outside the box and always strives to do more than what is required? Someone who sees the bigger picture? You sound brilliant to work with!

We are committed to providing equal opportunities to all applicants. If you require accommodation due to a disability, you will have an opportunity to notify us when scheduling your interview.

We are an equal opportunity employer and encourage applications from all qualified individuals. Our ability to work as one team across Canada, the United States, and the Caribbean is foundational to our success. We show up as our authentic selves each day and create space for one another’s unique contributions.

We respect the diverse cultures, traditions, and perspectives of Indigenous Peoples and seek to achieve equitable partnerships and opportunities with Indigenous communities.

The Fine Print

Candidates must be legally eligible to work in the country in which they applied. Regrettably, we are unable to sponsor employment visas at this time.

Final candidates will be required to undergo a confidential pre-employment background check, including but not limited to educational, criminal, credit, drug and alcohol, and/or fitness for duty testing.