Senior IT Security Specialist

Electricmind; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

Electric Mind is a technology consulting firm helping organizations execute complex transformations. As a Senior IT Security Specialist, you will design and implement scalable, secure technology solutions across network, endpoint, application, and compliance security domains, working with both startups and global enterprises on mission-critical security initiatives.

Join Electric Mind to deploy, manage and optimize security controls, conduct tests, and support audits, while mentoring junior

Qualifications

• 5–10+ years of experience in IT security, with significant time in security and compliance roles.
• Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems.
• Experience administering DLP, antivirus/endpoint protection, anti-spam/email security platforms and deploying 2FA/MFA solutions.
• Proven ability to perform penetration testing and run SAST/DAST tools, interpret results and drive remediation.
• Working knowledge of ISO 27001, SOC 2, NIST CSF, PCI DSS and TCP/IP, VPNs, AD, Windows & Linux.

Responsibilities

• Deploy and tune firewalls and IPS; review rules and manage segmentation.
• Administer antivirus, EPP/EDR, anti-spam and DLP across email, endpoints and cloud storage.
• Plan and conduct penetration tests; integrate SAST/DAST into pipelines; track remediation.
• Maintain evidence for compliance frameworks; support audits and assessments.
• Mentor junior team members and report security posture to IT leadership.

Skills

Firewall management

IPS/IDS configuration

DLP & EPP/EDR management

Penetration testing

SAST/DAST tooling

Compliance knowledge

Networking basics (TCP/IP, VPN)

2FA/MFA deployment

Tools

Palo Alto Panorama

SIEM platforms

Cloud security (AWS/Azure/GCP)

Log correlation

ITIL change management

Job description

Electric Mind is a technology consulting firm helping organizations execute complex transformations. As a Senior IT Security Specialist, you will design and implement scalable, secure technology solutions across network, endpoint, application, and compliance security domains, working with both startups and global enterprises on mission-critical security initiatives.

What You'll Do

• Deploy, manage and tune next-generation firewalls, including rule reviews, segmentation and change control; operate and tune intrusion prevention systems (IPS) and investigate alerts
• Administer antivirus, endpoint protection (EPP/EDR), anti-spam and email security controls; manage data loss prevention (DLP) policies across email, endpoints and cloud storage
• Plan and conduct penetration tests; integrate static (SAST) and dynamic (DAST) application security testing into development pipelines; triage findings and track remediation
• Maintain controls and evidence for compliance frameworks (ISO 27001, SOC 2, NIST CSF, PCI DSS); prepare for and support audits and security assessments
• Participate in incident response investigations; mentor junior team members; report on security posture and risks to IT leadership

What You Need

• 5–10+ years of experience in IT security, with significant time in security and compliance roles
• Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems
• Experience administering DLP, antivirus/endpoint protection, anti-spam/email security platforms and deploying 2FA/MFA solutions
• Proven ability to perform penetration testing and run SAST/DAST tools, interpret results and drive remediation
• Working knowledge of compliance frameworks (ISO 27001, SOC 2, NIST CSF, PCI DSS) and solid understanding of TCP/IP, routing, VPNs, Active Directory, Windows and Linux systems

Nice to Have

• Experience with Palo Alto Networks firewalls managed through Panorama, including device groups, templates and security policy
• Cloud security knowledge in AWS, Azure or Google Cloud: identity and access management, network security groups, logging and CSPM
• Familiarity with SIEM platforms, log correlation and ITIL change management standards
• Exposure to zero trust architecture, secure remote access and DevSecOps practices
• Certifications: CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE (Palo Alto), AWS Security Specialty, Azure Security Engineer (AZ-500) or CCSP