Senior Security Operations Specialist

Socket.dev; Mississauga; On-site; CAD 90,000 - 130,000; Full time

Job summary

CDW is seeking a Sr. Specialist – Managed Security Services to lead second-level client support and expert security guidance across multiple disciplines. You will mentor Analysts, develop security use cases, and coordinate complex security investigations.

The role requires IT security excellence and a proactive, client-focused mindset. The position supports a 7x24 MSS operation, with opportunities to influence security posture reports and strategic recommendations for diverse clients.

Qualifications

• Bachelor's degree in Engineering/CS or related field and 3–5 years of security experience in a client-focused environment.
• Or 8 years total IT experience including 3–5 years in security in a client environment or SOC.
• At least 2 administrator or expert level certifications in Managed Security Services disciplines (Cortex, IBM QRadar, Splunk, CrowdStrike, Exabeam, Tenable, SC-200/SC-100, etc.).
• Position requires 7 days per week, 24-hour coverage with ability to work weekends and overtime.
• Positive team influence, cooperative, and proactive in coaching and learning.

Responsibilities

• Lead second-level security investigations and remediation guidance with clients and teams.
• Develop, tune, and optimize security use cases, SIEM rules, and detection mechanisms.
• Mentor analysts and provide knowledge transfer on technical issues.
• Prepare and deliver client-facing quarterly/monthly security posture briefings.
• Drive service improvements and automation across MSSP operations.

Skills

Security analytics

Threat hunting

Incident response

Client communication

Mentoring teammates

Education

Bachelor's degree in Engineering/CS or related field

3-year diploma plus 3–5 years security experience

Tools

SIEM

EDR

Threat intelligence

Job description

Job Summary

The Sr. Specialist – Managed Security Services continues second-level technical client support provided by the Analyst and Sr. Analysts. The Sr. Specialist has proven process experience in all technical disciplines supported by the Managed Security Services practice, specializing in at least one of three particular disciplines: Network Security, Information Security and/or Endpoint Security. The Sr. Specialist provides both technical and process mentorship in these areas to Analysts and Sr. Analysts. The Sr. Specialist continues to develop a platform of technical expertise.

What you will do

Service Delivery – 50% job weight

• Deliver tasks on time and with minimal or no supervision
• Monitors and resolving second-level support requests accurately and timely. Escalates unresolved issues to senior team members and/or manager(s)
• Develop, tune, and optimize security use cases, SIEM rules, and detection mechanisms across diverse client environments.
• Lead complex or Tier-3 security incident investigations, coordinate containment strategies, and provide expert remediation guidance.
• Performs security analytics and provides timely summarized findings and recommendations to clients
• Conduct vulnerability assessments, review threat intelligence feeds, and prioritize risk mitigation recommendations for discussion with clients.
• Lead and conduct hypothesis-based threat hunt across clients’ environments.
• Build custom AI agents within SIEM/EDR for autonomous incident investigation and response.
• Configure and administer SIEM and EDR platform for optimization
• Performs root cause analysis and collaborate with Consultants and Analysts to solve repetitive system performance or configuration problems
• Provide technical knowledge transfer to clients and internal department on low complexity problems
• Build investigation playbooks and automated workflows to drive efficiency across the MSSP operations center
• Carry out platform integrations for improved threat detection and response.
• Serve as a subject matter expert for internal teams and external clients, delivering security posture reports, briefings, and strategic recommendations
• Identifies, records, and escalates service performance trends, anomalies, and SLA breaches to senior leadership
• Applies Trusted Advisor techniques to build up client trust and influence loyalty
• Manages Great Client Communications
• Works towards confidently running Great Meetings, differentiating services per MSS positioning
• Handles technical account management responsibilities for assigned accounts
• Provides supervision over technical aspects of service delivery
• Prepare and deliver client facing quarterly, monthly meetings and tuning calls with designated accounts

Services Improvement and Enhancement – 30% job weight

• Identifies and provides recommendations for technical deficiencies, service performance issues, product utilization, bugs, and enhancements
• Assists in the development of reports and presentations and provides technical knowledge transfer and analysis to clients on performance status, trends, and metrics in a specific area of discipline.
• Mentor analysts and serve as an escalation point for their technical related issues
• Recommends process enhancements and drives efficiency by reducing average time to troubleshoot, repetitive issues and problem service tickets, reducing false-positives
• Performs ongoing analysis and system testing of new system releases, upgrades, and/or patches in one or more specific technologies
• Makes recommendations to improve workflows and drive automation, creating efficiencies
• Develops Standard Operating Procedures (SOPs) and knowledge base articles
• Conduct technical and incident handling knowledge transfer sessions
• Carry out research on supported technologies and develop actionable threat advisory documentation

Professional Development – 20% job weight

• Attends training sessions or shadowing activities, and obtains industry related certifications as determined by Manager
• Participate notably in assigned self-paced training

What we expect of you

• Bachelor's degree (B.A./B.S.) or a 3-year diploma in Engineering, Computer Science, or a Technology related field and 3 to 5 years of security experience in a client-focused environment, and/or working in a security operations center, OR
• 8 years total of Information Technology experience to include 3 to 5 years of security experience in a client-focused environment, and/or working in a security operations center
• At least 2 administrator or expert level technical certifications in Managed Security Services disciplines, included but not limited to:
• Cortex: XDR Engineer or XSIAM Engineer; IBM QRadar Secuity - Certified Administrator, Deployment Professional; SANS: GCIA, GCIH, GSOC; Splunk, Crowdstrike Falcon - CCFA, CCIS, CCFH, CCCS, CCSE; Exabeam: Security Engineer Associate, Security Engineer Advanced, Associate Implementation Engineer; Tenable VM Specialist, Microsoft SC-200, SC-100, C|EH, C|CIH, or similar technology certifications
• The position is part of a 7-day per week, 24-hour per day managed services operations. To provide the required coverage; work weekends, holidays, and overtime must be available.
• Positive team influence, approachable, supportive, and actively participates in coaching and learning.
• Punctual and organized, ensures timely completion of tasks.
• Experience supporting and implementing IT infrastructure and Information Systems design or support involving hardware, software and services at an enterprise level for at least one discipline in the Managed Security Services portfolio
• Demonstrated ability to investigate increasingly complex problems where analysis of data requires evaluation of identifiable factors from multiple IT infrastructure systems
• Demonstrated ability to continuously identify resolutions and techniques that meet technical requirements within the context of best practices, and make recommendations to achieve targeted objectives
• Proven ability to establish collaborative approach to problem solving, ensuring that others’ input is gathered and discussed, and that solutions generated by the team are tested and proven
• Mentors team members and work independently with minimal supervision.
• Sets and achieves goals autonomously, contributing to team and organizational objectives.
• Demonstrated ability to achieve high level of Customer Satisfaction on all engagements
• Demonstrates strong verbal and written communication skills, as well as proficiency in Microsoft Office tools.
• Demonstrated ability to execute service delivery using productivity tools such as word processing, spreadsheet, diagram creation, presentation and email processing applications.

CDW is committed to being an AI-fluent organization

We’re looking for people who bring curiosity, a learner’s mindset, and a willingness to engage with ever-evolving technology and tools. We value adopting AI as a partner, openness to experimentation, and a shared interest in learning together on AI. Our goal is to create a culture where AI enhances—not replaces—human creativity and decision-making. You don’t need to be an expert today; what matters is your readiness to explore, adapt, and grow with us as we integrate AI responsibly and effectively into our work.

Additionally, CDW is committed to fostering an equitable, transparent, and respectful hiring process for all applicants. During our application process, our goal is to understand your experience, strengths, skills, and qualifications. As an AI forward company, we see AI not just as a tool, but as a catalyst for new ways of thinking, creating, and communicating. We encourage candidates to embrace an AI mindset, one that’s curious, adaptive, and ready to explore what’s possible. We welcome thoughtful use of AI to expand your perspective and elevate how you share your story, while ensuring your application remains rooted in your own background, judgment, and voice.

About Us

CDW is a Fortune 500 technology solutions provider that helps businesses, government, education, and healthcare organizations achieve what’s possible through technology. What makes CDW different isn’t just what we do—it’s how we do it. At CDW we act as one—building trust, speaking candidly, and working together to achieve more. We play to win—focusing on what matters most and delivering for our customers. And we think forward—staying curious, moving fast, and continuously learning. We believe meaningful work happens when people feel supported, heard, and empowered to contribute. That’s why we think of ourselves as coworkers, not just employees—working together to solve complex challenges and deliver real impact for our customers and communities.

As a full‑stack, full‑lifecycle technology partner, CDW brings deep expertise, strong relationships, and broad industry knowledge to help turn ideas into outcomes. When you join CDW, you become part of a collaborative environment where your work matters, your growth is supported, and your contributions help shape what’s next.

Together, we deliver the full promise of what technology can do. Together, we Make Amazing Happen.

CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law.