SOC Infrastructure Specialist

As an IT Security Services Specialist – SOC Infrastructure you will apply your cyber security knowledge and skills to defend our clients from increasingly complex and persistent cyber threats using our advanced security tools and platforms and following robust security operations processes and procedures. You will be working as part a team of security professionals in our Canada Security Operations Center (SOC) supporting the infrastructure to deliver managed security services.

Working with a team of security professionals from our SOC in Markham Ontario you will be involved in security deployment and integration activities infrastructure project management device management policy management security operations infrastructure operations and other security services related tasks.

• Primarily work as part of IBM SOC infrastructure team operating supporting and maintaining the SOC infrastructure to serve our clients.
• Perform steady state management of various cloud and network security solutions such as next-gen firewalls web application and API security cloud DoS protection local and edge network access security cloud workload protection and posture management etc.
• Work with the broader team to define and support security architecture processes procedures governance operations and reporting of SOC IT infrastructure in a hybrid multi-cloud environment.
• Regularly review product announcements advisories and create remediation plans and implement to mitigate associated risks.
• Manage security vulnerabilities and perform patching and upgrades on security systems and platforms.
• Lead and participate in troubleshooting sessions to find root cause of issues and provide quick workarounds and timely resolutions within defined Service Level Agreements (SLAs).
• Perform all activities adhering to IBM and Client policies processes and guidelines and contribute towards continuous improvements to the services.
• Follow IT service management processes including Change Incident and Problem Management.
• Participate in on-call rotations and perform change and incident management outside of normal shift hours as required.
• Contribute towards team documentation efforts by creating and maintaining effective operational and technical documentation.
• Contribute to the SOC annual audit and compliance projects.
• Lead and procurement of software hardware and licensing for the SOC to operate.
• Work effectively as a team player and proactively identify and escalate to management any risks and opportunities in the managed services.
• Effectively interface with IBM governance teams handle escalations related to the team’s services and ensure high level of customer satisfaction.

• English Fluent (verbal and written).
• Min 8-10 years experience in a Network Security or Security Operations role
• Federal Government of Canada Secret security clearance (Level II) – or eligible to achieve security clearance.
• Extensive knowledge and expertise working with Fortinet suite of products including FortiGate and FortiWeb.
• Experience working with various operating systems including Windows Linux and RedHat OpenShift.
• Experience handling security Incidents Changes and Service Requests using IT Service Management tools (ITSM) and methodologies (ITIL).
• Solid understanding of other IT infrastructure areas such as networking (switches routers) and servers.
• Broad knowledge and experience with cloud security solutions using cloud native security controls and tools and solutions including IBM Cloud and Google Cloud Platform (GCP) or similar.
• Broad knowledge and experience with other security solutions in network/perimeter security endpoint security data and content security encryption and identity and access management.
• Strong critical thinking and analytical skills.
• Work effectively as part of a team or independently to achieve business outcomes.

• Bachelor’s or master’s degree in computer science or information technology.
• Industry recognized security certifications. (E.g. CISSP CCSP CISM CEH Security+).
• Technical certifications product cloud or vendor specific certifications (E.g. Fortinet Cisco Palo Alto).
• Experience working with service management tools such as ServiceNow.
• Client facing experience supporting large scale security solutions.
• Experience with cloud security solutions working with major cloud service providers.