Cybersecurity Operations Specialist

The Security Operations Specialist plays a key role in the planning, design, and delivery of ongoing cybersecurity operations within Canadian Cancer Trials Group (CCTG). Reporting to the Chief Information Officer (CIO), the Specialist will work to minimize risks against internal and external threats by assisting in the cybersecurity solution design, implementation, testing, maintenance, active monitoring, reporting, intrusion detection/prevention, and escalation within the CCTG security architecture to maintain the integrity and/or efficiency of the networks and servers.

The Specialist is a subject matter expert in cybersecurity architecture, tools and technologies, and is responsible for project planning and management. The Specialist provides management of intrusion detections and prevention systems for both the network and host-based systems, as well as the security management systems. The Specialist is an excellent problem solver, an excellent communicator and is a demonstrated leader in establishing relationships and communicating with internal and external stakeholders.

The Specialist will provide guidance and assistance from various sources to ensure current and future security in architectural design and systems implementation. The Specialist will play a leading role in cybersecurity incident response.

The schedule for this position may require the incumbent to work occasional early mornings, evenings and/or weekends for both scheduled maintenance and upgrades, and in response to urgent security issues.

1. Oversees the development and maintenance of security measures to protect computer systems, networks and data. Stays up-to-date on the latest intelligence, including hackers' methodologies, in order to anticipate security breaches. Responsible for preventing data loss and service interruptions by evaluating technologies and recommending the most effective solution to protect a network.
2. Employs constant learning of security concepts and practices to proactively identify threats, vulnerabilities, and exploits and utilizing this information, installs, configures and leverages tools, processes and standards to configure, monitor, and audit systems and applications on a regular basis.
3. Gains an understanding of CCTG IT structure, as well as Queen's University as a whole, to establish effective cybersecurity plans.
4. Performs configuration of linux, unix and Windows based servers for cybersecurity related software and platforms.
5. Oversees network disaster recovery plans. Investigates security violations by applying their understanding of multiple technologies and security threats to provide assistance, guidance, problem resolution and technical support in the on-going protection of the CCTG systems and infrastructure.
6. Develops and maintains technology standards and provides technical security leadership which may include input for the design of solutions, security training material, workshops and communication updates.
7. Develops migration strategies for both hardware and software. Creates scripts and implements tools to automate and develop a variety of configuration and updating tasks including signature updates, rule changes, and policy updates on security devices, network appliances, servers and endpoints.
8. Performs security assessments to ensure compliance with security policies, standards and procedures, and works with the various areas and takes corrective actions on any identified security exposures found.
9. Participates in the CCTG Computer Security Incident Response Team as subject matter expert.
10. Creates, maintains and publishes security documentation.
11. Assists in management of network security such as firewall changes, data encryption and other network security measures.
12. Advise and provide expert knowledge and support to other CCTG IT teams and CCTG non-IT staff.
13. Other security-related duties and projects as assigned by the manager.
14. Ability to work outside of business hours is required.

1. University Degree in computer science or equivalent combination of education and work experience, with a minimum of 5 years' experience in a Security Specialist role.
2. Professional certifications from bodies such as ComTIA A+, Security+, Network+, SANS GSEC, and/or other information security certifications.
3. Experience in information security, ideally in multi-platform environments in three or more of the following areas: web applications, operating system security, cloud computing, desktop applications, networking, DLP, anti-malware, IDS/IPS, penetration & vulnerability testing.
4. The ability to read and understand vulnerability bulletins and security event data from many sources.
5. Ability to understand and utilize HTTP and similar protocols for analysis and troubleshooting.
6. Familiarity with information security best practices.
7. Demonstrated technical proficiency in the implementation and maintenance of multi-user Windows and Linux computer systems.
8. Experience with analyzing security attacks and exploits.
9. Demonstrated knowledge and experience in Unix/Linux OS and scripting and automation, Power shell, and firewall management. Knowledge of VMWare technology, databases, Active Directory, PHP and web stacks on Linux is considered an asset.
10. Consideration may be given to an equivalent combination of education and experience.

1. Respects diversity and promotes equity and inclusion in the workplace.
2. Demonstrated expertise in Windows / Linux server administration, hardware, networks, and common applications software.
3. Advanced analytical and problem-solving skills to assist in finding effective solutions.
4. Communications and interpersonal skills to interact with a variety of people with various levels of technological sophistication. Demonstrated client-service approach.
5. Highly developed interpersonal skills to deal with both technical and non-technical staff at all levels. The ability to work in groups or as part of a team.
6. Ability to keep up and adapt to, a constantly changing technological environment.
7. Demonstrated editing and writing skills to prepare documentation.
8. Ability to follow formal business practices with high attention to detail.
9. Ability to support teaching and training initiatives.

1. Formulates, evaluates and implements solutions to problems.
2. Assesses the nature of a request and provides assistance to the customer as appropriate.
3. Determines when to involve senior staff in resolving complex or sensitive systems problems.
4. Prioritizes own workloads.
5. Determines how to deal with operational problems that occur outside of working hours to avoid major customer impact.
6. Plans new security initiatives within the CCTG. Determines project guidelines and timelines.
7. Assesses, determines and recommends acquisition of new software or hardware needs. Determines when to consult with senior staff or supervisor and escalates as required.

The University invites applications from all qualified individuals. Queen's is committed to employment equity and diversity in the workplace and welcomes applications from women, visible minorities, Aboriginal Peoples, persons with disabilities, and persons of any sexual orientation or gender identity. In accordance with Canadian Immigration requirements, priority will be given to Canadian citizens and permanent residents.

The University provides support in its recruitment processes to applicants with disabilities, including accommodation that takes into account an applicant's accessibility needs. Candidates requiring accommodation during the recruitment process are asked to contact Human Resources at hradmin@queensu.ca.