Defensive Security Specialist

sunlife; Waterford; On-site; EUR 40,000 - 54,000; Full time

Job summary

Sun Life is seeking a Defensive Security Specialist to support cyber security investigations, alert triage, evidence gathering, and incident response within the SRC function. You will build technical capability, learn enterprise risk, and operate under established procedures with guidance from senior analysts.

Key activities include triage of alerts, gathering evidence from tools and platforms, determining scope and impact, maintaining detailed case notes, and supporting post-incident work.

Qualifications

• Foundational understanding of cyber security operations, investigations, incident response, threat analysis, or related support work.
• Basic knowledge of SIEM, EDR, IDS/IPS, enterprise networking and cloud logging.
• Understanding incident response lifecycle and evidence handling best practices.
• Clear written and verbal communication with strong attention to detail.
• Willingness to learn and participate in training and on-call duties.

Responsibilities

• Conduct initial triage and investigation of cyber security alerts using established procedures and playbooks.
• Gather, preserve, and document evidence from security tools, endpoints, logs and cloud platforms.
• Assess evidence to determine scope, severity and impact, escalate as needed.
• Maintain case notes, timelines and evidence suitable for operational review.
• Support incident response, audit, and post-incident activities under guidance.
• Identify patterns and gaps to improve playbooks and detection quality.
• Participate in training, exercises, and on-call duties as required.

Skills

Cyber security operations

Incident response

Evidence handling

Written and verbal communication

Attention to detail

Willingness to learn

Education

Degree in Computer Science

Cyber security training

Tools

SIEM

EDR

IDS/IPS

Cloud platforms

Identity systems

Job description

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Role Summary

The Defensive Security Specialist is a developing role within Sun Life's Security, Risk and Crisis Management (SRC) function. The role supports cyber security investigations, alert triage, evidence gathering, control validation, and security incident response while working within established procedures and under the guidance of more experienced analysts. The position builds technical capability, sound investigation habits, and an understanding of enterprise risk through structured operation al work and continuous learning.

Key Accountabilities

• Conduct initial triage and investigation of cyber security alerts using established procedures, playbooks, and escalation paths.
• Gather, preserve, and document relevant evidence from security tools, logs, endpoints, identity systems, cloud platforms, and network sources.
• Assess available evidence to determine likely scope , severity, and impact, escalating uncertainty or material risk promptly.
• Maintain clear case notes, timelines, investigation records, action trackers, and supporting evidence suitable for operational review.
• Support incident response, Major Incident Management, control validation, audit, compliance, and post-incident activities under guidance.
• Identify recurring alert patterns, documentation gaps, and opportunities to improve playbooks, detection quality, automation, alert tuning opportunities, and team practices.
• Participate in training, tabletop exercises, lessons learned, and operational coverage, including on-call or after- hours support where required .
• Participate in on-call duties as required .

Competencies

• Degree, diploma, relevant training, or equivalent practical experience in Computer Science, Computer Networking, Engineering, Cyber Security, or related discipline.
• Foundational understanding of cyber security operations, investigations, incident response, threat analysis, or comparable technical support work.
• Basic practical knowledge of SIEM, EDR, IDS/IPS, enterprise networking, identity, cloud, logging, and investigation technologies.
• Understanding common attack techniques, authentication, security controls, evidence handling, and the incident response lifecycle.
• Ability to analyze structured evidence, follow procedures, recognize gaps, and communicate when additional support or escalation is required .
• Clear written and verbal communication, strong attention to detail, discretion, accountability, curiosity, and willingness to learn.
• Entry-level certification such as Security+, GISF, or equivalent is an asset.

Salary Range: €39,800 - €53,700

At our company, we are committed to pay transparency and equity. Your actual base salary will be determined based on your unique skills, qualifications, experience, and education. In addition to your base salary, this position is eligible for a discretionary annual incentive award based on your individual performance as well as the overall performance of the business. We are dedicated to creating a work environment where everyone is rewarded for their contributions.

Job Category: IT - Technology Services

Posting End Date: 30/09/2026