Defensive Security Specialist

Role Summary 

The Defensive Security Specialist is a developing role within Sun Life's Security, Risk and Crisis Management (SRC) function. The role supports cyber security investigations, alert triage, evidence gathering, control validation, and security incident response while working within established procedures and under the guidance of more experienced analysts. The position builds technical capability, sound investigation habits, and an understanding of enterprise risk through structured operational work and continuous learning. 

Key accountabilities include: 

• Conduct initial triage and investigation of cyber security alerts using established procedures, playbooks, and escalation paths. 

• Gather, preserve, and document relevant evidence from security tools, logs, endpoints, identity systems, cloud platforms, and network sources. 

• Assess available evidence to determine likely scope, severity, and impact, escalating uncertainty or material risk promptly. 

• Maintain clear case notes, timelines, investigation records, action trackers, and supporting evidence suitable for operational review. 

• Support incident response, Major Incident Management, control validation, audit, compliance, and post-incident activities under guidance. 

• Identify recurring alert patterns, documentation gaps, and opportunities to improve playbooks, detection quality, automation, alert tuning opportunities, and team practices. 

• Participate in training, tabletop exercises, lessons learned, and operational coverage, including on-call or after-hours support where required. 

• Participate in on-call duties as required.  

Competencies 

• Degree, diploma, relevant training, or equivalent practical experience in Computer Science, Computer Networking, Engineering, Cyber Security, or related discipline. 

• Foundational understanding of cyber security operations, investigations, incident response, threat analysis, or comparable technical support work. 

• Basic practical knowledge of SIEM, EDR, IDS/IPS, enterprise networking, identity, cloud, logging, and investigation technologies. 

• Understanding common attack techniques, authentication, security controls, evidence handling, and the incident response lifecycle. 

• Ability to analyze structured evidence, follow procedures, recognize gaps, and communicate when additional support or escalation is required. 

• Clear written and verbal communication, strong attention to detail, discretion, accountability, curiosity, and willingness to learn. 

• Entry-level certification such as Security+, GISF, or equivalent is an asset. 

Salary Range: €39,800 - €53,700

At our company, we are committed to pay transparency and equity. Your actual base salary will be determined based on your unique skills, qualifications, experience, and education. In addition to your base salary, this position is eligible for a discretionary annual incentive award based on your individual performance as well as the overall performance of the business. We are dedicated to creating a work environment where everyone is rewarded for their contributions.