{"id":3880082,"url":"https://alion.io/job/electric-mind-senior-it-security-specialist","title":"Senior IT Security Specialist","company":{"id":58136,"name":"Electric Mind","domain":"electricmind.com","url":"https://alion.io/company/electric-mind","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":94,"open_postings":12,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Support","role_family":"Support","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada","New York, United States"],"countries":["CA","US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DLP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"ITIL","optional":true},{"name":"SIEM","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-06T14:57:40Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-11T02:30:50Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About the role\nWe are hiring a Senior IT Security Specialist to protect our networks, endpoints, applications and cloud environments, and to keep us compliant with the frameworks our business and clients depend on. You will own day-to-day security operations across firewalls, intrusion prevention, wireless, email and endpoint protection, while leading our vulnerability testing and compliance programs.\nThis is a hands-on senior role. You will configure and tune security controls yourself, guide junior staff, and advise leadership on risk.\nWhat You'll Do\nNetwork and perimeter security\nDeploy, manage and tune next-generation firewalls, including rule reviews, segmentation and change control.\nOperate and tune intrusion prevention systems (IPS), investigate alerts and reduce false positives.\nSecure enterprise WiFi, including WPA3/802.1X authentication, rogue access point detection and guest network isolation.\nEndpoint, email and data protection\nAdminister antivirus and endpoint protection (EPP/EDR) across servers and workstations, and respond to detections.\nManage anti-spam and email security controls, including phishing filtering, SPF, DKIM and DMARC.\nOwn data loss prevention (DLP) policies across email, endpoints and cloud storage, and handle policy incidents.\nRun two-factor and multi-factor authentication (2FA/MFA) rollout, enforcement and exception management.\nApplication security and testing\nPlan and conduct penetration tests, and coordinate and scope third-party pen tests.\nIntegrate static (SAST) and dynamic (DAST) application security testing into development pipelines.\nTriage findings with development teams, track remediation and verify fixes.\nCompliance and risk\nMaintain controls and evidence for frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS and applicable privacy laws.\nPrepare for and support internal and external audits, client security questionnaires and risk assessments.\nWrite and update security policies, standards and procedures.\nOperations and leadership\nParticipate in incident response, including investigation, containment and post-incident reviews.\nMentor junior team members and deliver security awareness training.\nReport on security posture, metrics and risks to IT leadership.\nWhat You'll Bring\n5 to 10 plus years of experience in IT security, with significant time in security and compliance roles.\n\nHands-on experience configuring and managing enterprise firewalls and intrusion prevention systems.\nPractical experience securing enterprise WiFi networks.\nExperience administering DLP, antivirus/endpoint protection and anti-spam/email security platforms.\nExperience deploying and supporting 2FA/MFA solutions.\nProven ability to perform penetration testing and to run SAST and DAST tools, interpret results and drive remediation.\nWorking knowledge of compliance frameworks (for example ISO 27001, SOC 2, NIST CSF or PCI DSS) and audit preparation.\nSolid understanding of TCP/IP, routing, VPNs, Active Directory/identity management and Windows and Linux systems.\nClear written and verbal communication, including explaining risk to non-technical audiences.\nNice to Haves\nExperience with Palo Alto Networks firewalls managed through Panorama, including device groups, templates, security policy and threat prevention profiles.\n\nCloud security knowledge in AWS, Azure or Google Cloud: identity and access management, network security groups, logging and cloud security posture management (CSPM).\nExperience with ITIL change management standards.\n\nFamiliarity with SIEM platforms and log correlation.\n\nExperience with DevSecOps practices and embedding security in CI/CD pipelines.\nExposure to zero trust architecture and secure remote access.\nEducation and Certifications\nDegree or diploma in Computer Science, Information Security or a related field, or equivalent experience.\nOne or more certifications is an asset: CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE (Palo Alto), or a cloud security certification such as AWS Security Specialty, Azure Security Engineer (AZ-500) or CCSP.","description_format":"text","description_chars":4046,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-06T17:46:50Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":38,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/electric-mind-senior-it-security-specialist","json_url":"https://alion.io/job/electric-mind-senior-it-security-specialist.json","meta":{"generated_at":"2026-11-11T06:14:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8774,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58136},"rest":"https://alion.io/mcp/rest/get_company?id=58136"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felectric-mind-senior-it-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felectric-mind-senior-it-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felectric-mind-senior-it-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/electric-mind-senior-it-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felectric-mind-senior-it-security-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3880082}},{"tool":"search_jobs","arguments":{"company":"electricmind.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3880082},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}