Lead Specialist, IT Cybersecurity

As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation. For more information, please visit www.sunocolp.com

Sunoco LP is a leading energy infrastructure and fuel distribution master limited partnership operating across 32 countries and territories in North America, the Greater Caribbean, and Europe. The Partnership’s midstream operations include an extensive network of approximately 14,000 miles of pipeline and over 160 terminals. This critical infrastructure complements the Partnership’s fuel distribution operations, which distribute over 15 billion gallons annually to approximately 11,000 Sunoco and partner-branded retail locations, as well as independent dealers and commercial customers.

At Sunoco, we take great pride in what we do and wholeheartedly believe our employees drive success for our company and our customers. We are always looking for the best and brightest talent and are committed to making your job a challenging and rewarding experience.

Competitive Benefits. Meaningful Extras. Unmatched Value.

• A place where you can take your career in the direction you want to grow and go

The Opportunity:

Serve as a senior security professional and trusted advisor responsible for protecting the organization's technology environment through effective security operations, incident response, vulnerability management, and network security practices. You will play a key role in identifying, investigating, and mitigating cyber threats while partnering with technology and business teams to implement secure, business-aligned solutions. This role requires deep technical expertise across security operations, network security technologies, and security monitoring capabilities.

Responsibilities:

• Serve as a senior technical consultant, ensuring security controls, system designs, and technology implementations align with business objectives, architectural standards, and security requirements.
• Lead the investigation, analysis, containment, and remediation of complex security incidents and emerging threats.
• Monitor and safeguard network and security infrastructure by analyzing security events, network traffic, threat intelligence, and suspicious activity to identify potential security risks.
• Perform advanced threat hunting and security investigations to proactively identify malicious activity and strengthen detection capabilities.
• Design, implement, maintain, and optimize network security controls, including firewalls, web application firewalls (WAF), proxy solutions, and related security technologies.
• Lead vulnerability management activities, including vulnerability analysis, risk prioritization, remediation recommendations, and validation of corrective actions.
• Conduct risk evaluations for infrastructure, applications, cloud services, and technology projects.
• Collaborate with stakeholders to define business and technical requirements and translate them into secure, practical solutions.
• Participate in security projects and initiatives, ensuring security requirements are incorporated throughout implementation and delivery.
• Develop and enhance security monitoring use cases, detection logic, and operational processes to improve threat detection and response effectiveness.
• Stay current on emerging threats, attack techniques, vulnerabilities, and security technologies, applying industry knowledge to strengthen the organization's security posture.

Education:

• Bachelor’s degree in computer science, Information Security, Cybersecurity, or a related discipline. Equivalent combination of education and experience may be considered.
• Typically requires 5-8 years of experience in cybersecurity, information security, security operations, network security, or related disciplines.
• Industry recognized certifications such as CISSP, GCIH.

Requirements:

• Advanced knowledge of the NIST Cybersecurity Framework, OWASP, CIS Controls, and industry security best practices.
• Extensive experience in incident response, including investigation, containment, remediation, and post-incident analysis.
• Strong experience with vulnerability management processes, tools, and remediation practices.
• Hands‑on expertise managing and supporting network security technologies, including firewalls, WAFs, proxies, IDS/IPS, and network detection technologies.
• Experience working with SIEM, EDR/XDR, email security, vulnerability management platforms, and other enterprise security solutions.
• Strong understanding of network protocols, routing, segmentation, ports, packet analysis, and network traffic investigation.
• Experience analyzing security events and threat intelligence to identify and respond to cyber threats.
• Proven abil