Senior Cybersecurity Specialist

STACK IT Recruitment; Burlington; On-site; CAD 154,000 - 181,000; Full time

Benefits offered by this job

Paid vacation and personal days

Annual bonus

Job summary

STACK IT Recruitment seeks a Senior Cybersecurity Specialist to own security across a large, integrated technology environment in Burlington, ON—on-site. The role spans security engineering, incident response, identity, vulnerability remediation, and application security, coordinating with IT leadership and external partners.

You will balance risk with uptime, drive security improvements across Defender, M365/XDR, Purview, Intune, and Entra, and mentor teams through change windows and testing.

Qualifications

• 5+ years of hands-on cybersecurity experience.
• Strong experience with hybrid Active Directory and Microsoft Entra.
• MFA, Conditional Access, PIM, privileged identities, service accounts.
• Experience with Defender, M365/XDR, Purview, Intune.
• Incident investigation and vulnerability remediation.
• Knowledge of Azure and AWS security, Windows/Linux, networking, and cloud logging.
• Scripting with PowerShell or Python.
• Understanding of application/integration security, APIs, threat modeling, SAST/DAST.
• Strong judgment implementing security changes in production.

Responsibilities

• Assess the existing security environment, identify priorities, and own the security roadmap.
• Investigate security alerts and incidents and drive remediation to closure.
• Strengthen identity security across AD and Entra including MFA and CA.
• Implement and improve Defender, M365, Purview, Intune, and XDR across the environment.
• Drive vulnerability remediation based on risk and business impact.
• Partner with development, infrastructure, MDR/SIEM/XDR providers and vendors.
• Support application and integration security, including authentication and APIs.
• Maintain security playbooks, risk tracking, and program reporting.
• Introduce changes with testing, monitoring, rollback planning, and uptime considerations.

Skills

Senior security practitioner

Security engineering

Incident response

Identity security

Vulnerability remediation

Application security

Security program coordination

Tools

Microsoft Defender

Microsoft 365/XDR

Purview

Intune

Active Directory

Microsoft Entra

PowerShell

Python

Azure/AWS security

Job description

Could you be the person who sees what's missing, figures out what needs to change, and actually makes it happen?

Our client is looking for a Senior Cybersecurity Specialist to own security across a large, highly integrated technology environment. This is a hands-on role for someone who can move comfortably between security engineering, incident response, identity, vulnerability remediation, application security, and security program coordination.

You'll have the autonomy to assess the environment, identify priorities, and drive meaningful improvements, working closely with IT leadership, infrastructure, development teams, and external security partners.

Who You Are

You're a senior security practitioner with a broad technical perspective. You don't need to be an expert in every security product, but you know how to investigate, make sound decisions, implement controls, and follow through until the outcome is verified.

You're equally comfortable digging into an identity issue, investigating a security alert, working with developers on an application security concern, or coordinating a vendor to close a vulnerability.

Most importantly, you understand that security exists within a live business environment. You know how to balance risk reduction with uptime, testing, change windows, rollback planning, and

operational realities.

• Location: Burlington, ON - on-site
• Vacancy Type: This role reflects an existing vacancy

Requirements

What You'll Do

• Assess the existing security environment, identify priorities, and take ownership of the security roadmap.
• Investigate security alerts and incidents and drive remediation through verified closure.
• Strengthen identity security across Active Directory and Microsoft Entra, including MFA, Conditional Access, PIM, privileged access, and lifecycle controls.
• Implement and improve Microsoft security capabilities across Defender, Microsoft 365, Purview, Intune, and XDR.
• Drive vulnerability remediation based on technical risk and business impact.
• Partner with development, infrastructure, MDR/SIEM/XDR providers, and other vendors to improve security across the environment.
• Support application and integration security, including authentication, APIs, permissions, and threat modeling.
• Maintain security playbooks, procedures, documentation, risk tracking, and program reporting.
• Introduce security changes thoughtfully, with appropriate testing, monitoring, rollback planning, and consideration for live business operations.

What We're Looking For

• 5+ years of hands-on cybersecurity experience in a senior security engineering, security operations, or similar role.
• Strong experience with hybrid Active Directory and Microsoft Entra environments.
• Hands-on knowledge of MFA, Conditional Access, PIM, privileged identities, service accounts, access reviews, and identity lifecycle controls.
• Experience with Microsoft Defender, Microsoft 365/XDR, Purview, Intune, and related security controls.
• Proven experience with incident investigation and vulnerability remediation.
• Working knowledge of Azure and AWS security, Windows/Linux, networking, and cloud logging.
• Scripting experience with PowerShell or Python.
• Understanding of application/integration security, APIs, authentication, threat modeling, SAST, or DAST.
• Strong judgement when implementing security changes in production environments.
• Excellent communication skills and the ability to influence technical and non-technical stakeholders.
• A hands-on builder-operator mindset, comfortable implementing solutions rather than simply making recommendations.

What Makes This Role Exciting?

• Real Ownership: Shape security priorities and determine what needs to happen next.
• Technical Breadth: Work across identity, cloud, infrastructure, applications, and security operations.
• Visible Impact: Make meaningful security improvements across a large, highly integrated environment.
• Hands-On Influence: Design, implement, coordinate, and verify security improvements.
• Base Salary: $110,000 - $130,000 + 10% annual bonus
• Paid Vacation and Personal Days

We're proud to support diversity and inclusion. Need accommodation during the hiring process? Just let us know — we're here to help.

AI Use Disclosure

STACK IT uses AI-enhanced tools to support initial candidate screening and interview note analysis. All assessments and hiring decisions remain human-led.