Cyber Security Specialist

Must Haves:

• 5+ years of experience in cyber security solutions and next-generation network security, including hands-on implementation, configuration, and troubleshooting
• 5+ years of experience in network security and modern architectures (e.g., SDN, SD-WAN, SASE/SSE),
• Proven experience designing and implementing enterprise security architectures, including integration of network and security controls (e.g., Zero Trust, SASE, cloud security)
• Strong knowledge and practical application of security frameworks and models (NIST CSF v2, CIS Controls v8, MITRE ATT&CK, D3FEND, ATLAS)
• Experience designing and implementing security automation and orchestration workflows,
• Hands-on experience with AI-enabled security operations and security analytics.
• Experience with Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI agents, and AI governance.
• Bachelor’s degree in computer science, cyber security, or a related field.

Nice to have:

• Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science, cyber security or engineering is preferred.
• Preferred certifications such as:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• Other examples include Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC).
• Azure security
• 5+ years’ hands-on experience working in the K-12 education sector, with Ontario K-12 school boards, in particular with school board network, network security and cyber security.

Skill Set Requirements:

Cyber security and network architecture:

• 5+ years of experience in cyber security solutions and next-generation network security, including hands-on implementation, configuration, and troubleshooting
• 5+ years of experience in network security and modern architectures (e.g., SDN, SD-WAN, SASE/SSE), preferably within Ontario K–12 environments
• Proven experience designing and implementing enterprise security architectures, including integration of network and security controls (e.g., Zero Trust, SASE, cloud security)
• Proven hands-on experience implementing and supporting:
• Cloud-based security architectures (SSE/SASE including SWG, CASB, FWaaS, ZTNA)
• Zero Trust Architecture (ZTA)
• Cloud security platforms (e.g., Azure, AWS, Google Cloud)
• Endpoint security (EPP, EDR, XDR)
• Identity and access management (passwordless, MFA, certificate-based authentication)
• Incident Response and Incident Management (IR/IM) platforms
• Vulnerability management and patching automation
• User and Entity Behaviour Analytics (UEBA)
• Penetration testing and automated red teaming
• Operational Technology (OT) security and IT/OT convergence
• Strong knowledge and practical application of security frameworks and models (NIST CSF v2, CIS Controls v8, MITRE ATT&CK, D3FEND, ATLAS)
• Experience assessing, piloting, and implementing emerging cyber security and network technologies

Automation, AI & Security Operations:

• Experience designing and implementing security automation and orchestration workflows, preferably within Ontario K–12 school boards
• Hands-on experience with AI-enabled security operations and security analytics.
• Experience with Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI agents, and AI governance.
• Familiarity with AI security platforms such as Microsoft Security Copilot, OpenAI, Anthropic Claude, Google Gemini, AWS Bedrock, Palo Alto AIRS, Splunk AI Assistant, CrowdStrike Charlotte AI, or similar technologies.
• Strong understanding of AI governance and risk management including including prompt injection, model security, data protection, and responsible AI practices

Training, Collaboration & Stakeholder Engagement:

• 5+ years of experience presenting to senior and executive management and external stakeholders.
• 5+ years’ coordinating and leading complex technical work with multiple IT teams, internal and external stakeholders.
• 5+ years of experience preparing written materials (e.g., status reports, recommendations, briefing notes) and experience maintaining security content (rules, dashboards, playbooks) across shared platforms.
• 5+ years of experience delivering cyber security upskilling training to IT and security teams.
• Experience supporting cross-organizational collaboration, including knowledge sharing and threat intelligence exchange

Industry Certifications / Relevant Degrees:

• Bachelor’s degree in computer science, cyber security, or a related field.
• Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science, cyber security or engineering is preferred.
• Relevant vendor certifications or equivalent work experience.
• Preferred certifications such as:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• Other examples include Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC).
• Azure security

Public Sector Experience: