[Hiring] Senior Cybersecurity Specialist, Incident Response @Questrade Financial Group

Role Description

The Senior Cybersecurity Specialist, Incident Response is a critical contributor to delivering sustainable and measurable results in identifying and responding to cyber threats - safeguarding our company's infrastructure and data. You will be primarily involved in:

• Supporting the alert development cycle
• Triage and investigation of alerts
• Managing the full incident response lifecycle (investigation, containment, eradication, and recovery)
• Collecting and tracking metrics for reporting
• Working alongside internal customers and vendor support teams
• Aligning priorities and executing plans for new initiatives
• Contributing to process improvements and building documentation for new tools

In this role, responsibilities include but are not limited to:

• Mentoring and providing technical guidance to junior SOC analysts
• Monitoring, analyzing and reporting possible cybersecurity attacks
• Investigating and performing analysis of threat indicators
• Gathering Indicators of compromise and any relevant data for threat hunting activities
• Leveraging security tools (Elastic, CrowdStrike and more) for analysis to identify malicious activities
• Analyzing identified malicious activity to determine Tactics, Techniques and Procedures
• Conducting research, analysis and correlating gathered data from various resources
• Executing containment and eradication actions following established playbooks
• Participating in on-call and hands-on scheduled shift rotations, including outside of business hours
• Coordinating Security Incident Response and investigation with other internal teams and 3rd party providers
• Documenting incident timelines, evidence, and actions taken for post-incident review
• Performing post-incident reviews and producing lessons-learned reports
• Maintaining and improving incident response playbooks and runbooks
• Participating in tabletop exercises and IR simulations
• Providing proactive security investigations and searches on corporate environments
• Maintaining up-to-date understanding of security threats, countermeasures, security tools, cloud security and SaaS technologies
• Maintaining technical proficiency through training and keeping up with industry best practices
• Communicating investigation findings and risk posture to technical and non-technical stakeholders
• Owning and reporting on SOC operational metrics (MTTD, MTTR, alert fidelity)

Qualifications

• 5+ years of relevant experience in performing Cybersecurity Incident Response and Threat Hunting activities
• Hands-on experience in the creation and fine-tuning of detection rules
• Practical experience integrating security tools via APIs for automation
• Deep experience with complex investigations and incident response using EDR tools such as CrowdStrike Falcon
• Experience with forensic triage (disk, memory, network) and multiple operating systems (Mac, Linux, Windows)
• Solid experience with building SOC processes, playbooks, SIEM correlation rules, and incident reports
• Proven experience in incident management and communication under pressure
• Knowledge of programming languages such as Python, JavaScript and others
• Knowledge of NIST Cybersecurity Framework, MITRE ATT&CK
• Knowledge of security products and device monitoring tools

Requirements

• Hold GCIH, GCED, CCFR, HTB CDSA, GCFA, CHFI or similar relevant certifications

Benefits

• Health & wellbeing resources and programs
• Paid vacation, personal, and sick days for work-life balance
• Competitive compensation and benefits packages
• Work-life balance
• Career growth and development opportunities
• Opportunities to contribute to community causes
• Work with diverse team members in an inclusive and collaborative environment

Additional Information

• Operating hours for this role are 3 pm to 11 pm, Monday to Friday with on-call rotations schedule, including weekends
• Base salary range: $90,000 - $120,000
• The final compensation package will be commensurate with the successful candidate's experience, skills, and geographic location (Canada)
• Includes a comprehensive benefits plan and a competitive incentive (bonus) program for Full-Time Permanent roles