Senior IT Security Specialist

Electric Mind; Toronto; Sur place; CAD 120 000 - 190 000; Plein temps

Résumé du poste

Electric Mind is seeking a Senior IT Security Specialist to protect networks, endpoints, applications and cloud environments, and to keep us compliant with the frameworks our business and clients depend on. You will own day-to-day security operations across firewalls, intrusion prevention, wireless and endpoint protection, while leading our vulnerability testing and compliance programs.

This is a hands-on senior role.

Qualifications

• 5–10+ years in IT security roles.
• Hands-on experience with enterprise firewalls and IPS.
• Experience securing enterprise WiFi networks.
• Experience administering DLP and endpoint security.
• Experience deploying 2FA/MFA solutions.
• Penetration testing with SAST/DAST tools.
• Familiarity with ISO 27001, SOC 2, NIST CSF, PCI DSS.

Responsabilités

• Deploy and tune next-generation firewalls.
• Tune IPS and investigate alerts.
• Secure enterprise WiFi and 802.1X.
• Administer antivirus/EDR and email security.
• Manage DLP across email, endpoints and cloud storage.
• Lead 2FA/MFA rollout and policy management.
• Plan and conduct penetration tests; coordinate third-party tests.
• Integrate SAST/DAST into dev pipelines; verify fixes.
• Maintain controls for ISO27001, SOC2, NIST CSF, PCI DSS.
• Prepare for audits and risk assessments; write policies and procedures.
• Mentor juniors and provide security awareness training.

Connaissances

Firewalls

Intrusion Prevention

WiFi security

Endpoint security

2FA/MFA

Penetration testing

SAST/DAST

Compliance

Cloud security

DevSecOps

Formation

CS/Info Security degree

Outils

Palo Alto Panorama

Description du poste

AtElectric Mind,Engineeringis where strategy meets action. Our team helps organizations cut through complexity—aligning business ambition with technology execution to unlock real, lasting change.You’llwork alongside curious, driven people tackling high-impact challenges for everyone from scaling startups to global enterprises. Each engagement is different, pushing you to learn, adapt, and grow.

Electric Mind’s Technology Practice brings together deep engineeringexpertise, modern delivery disciplines, and pragmatic architectural thinking to help clients execute complex, mission-critical transformation. We design and implement scalable, secure, high-impact technology solutions that accelerate business outcomes.

About the role

We are hiring a Senior IT Security Specialist to protect our networks, endpoints, applications and cloud environments, and to keep us compliant with the frameworks our business and clients depend on. You will own day-to-day security operations across firewalls, intrusion prevention, wireless, email and endpoint protection, while leading our vulnerability testing and compliance programs.

This is a hands-on senior role. You will configure and tune security controls yourself, guide junior staff, and advise leadership on risk.

What You'll Do

Network and perimeter security

• Deploy, manage and tune next-generation firewalls, including rule reviews, segmentation and change control.
• Operate and tune intrusion prevention systems (IPS), investigate alerts and reduce false positives.
• Secure enterprise WiFi, including WPA3/802.1X authentication, rogue access point detection and guest network isolation.

Endpoint, email and data protection

• Administer antivirus and endpoint protection (EPP/EDR) across servers and workstations, and respond to detections.
• Manage anti-spam and email security controls, including phishing filtering, SPF, DKIM and DMARC.
• Own data loss prevention (DLP) policies across email, endpoints and cloud storage, and handle policy incidents.
• Run two-factor and multi-factor authentication (2FA/MFA) rollout, enforcement and exception management.

Application security and testing

• Plan and conduct penetration tests, and coordinate and scope third-party pen tests.
• Integrate static (SAST) and dynamic (DAST) application security testing into development pipelines.
• Triage findings with development teams, track remediation and verify fixes.

Compliance and risk

• Maintain controls and evidence for frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS and applicable privacy laws.
• Prepare for and support internal and external audits, client security questionnaires and risk assessments.
• Write and update security policies, standards and procedures.

Operations and leadership

• Participate in incident response, including investigation, containment and post-incident reviews.
• Mentor junior team members and deliver security awareness training.
• Report on security posture, metrics and risks to IT leadership.

What You'll Bring

• 5 to 10 plus years of experience in IT security, with significant time in security and compliance roles.
• Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems.
• Practical experience securing enterprise WiFi networks.
• Experience administering DLP, antivirus/endpoint protection and anti-spam/email security platforms.
• Experience deploying and supporting 2FA/MFA solutions.
• Proven ability to perform penetration testing and to run SAST and DAST tools, interpret results and drive remediation.
• Working knowledge of compliance frameworks (for example ISO 27001, SOC 2, NIST CSF or PCI DSS) and audit preparation.
• Solid understanding of TCP/IP, routing, VPNs, Active Directory/identity management and Windows and Linux systems.
• Clear written and verbal communication, including explaining risk to non-technical audiences.

Nice to Haves

• Experience with Palo Alto Networks firewalls managed through Panorama, including device groups, templates, security policy and threat prevention profiles.
• Cloud security knowledge in AWS, Azure or Google Cloud: identity and access management, network security groups, logging and cloud security posture management (CSPM).
• Experience with ITIL change management standards.
• Familiarity with SIEM platforms and log correlation.
• Experience with DevSecOps practices and embedding security in CI/CD pipelines.
• Exposure to zero trust architecture and secure remote access.

Education and Certifications

• Degree or diploma in Computer Science, Information Security or a related field, or equivalent experience.
• One or more certifications is an asset: CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE (Palo Alto), or a cloud security certification such as AWS Security Specialty, Azure Security Engineer (AZ-500) or CCSP.

About Electric Mind

Electric Mind is a fast-growing, AI-native advisory and digital engineering firm built for those who want to shape the future, not just watch it happen.We blend premium strategyexpertisewithcutting-edgeAI-centric engineering to solve complex, meaningful problems for industry-leading clients.

We pride ourselves on a high-touch delivery model and a culture that values diverse talent, innovation, and true client partnership — creating an environment where your ideas matter and your impact is visible.

Ifyou’relooking for a place where you can grow fast, collaborate with exceptional teammates, and help build a company scaling its capabilities and global footprint at speed — Electric Mind is the place to ignite your career. The future is bright!

For more info on Electric Mind, check out our Careers Page and Instagram.

Electric Mind is committed to diversity in the workplace. We are an inclusive employer and welcome and encourage applications from all qualified candidates. Applicants’ needs will be accommodated during our recruitment and selection process so please advise us if you require accommodation.