Our client, a leader in the Health industry, is looking for a Security Specialist to join their team for an initial 1 year contract.
This person will assist in day-to-day security operations activities, implement security enhancements and improvements in their cloud environment and application development/management practices, provide consulting expertise to their projects, and provide guidance, instruction, training, and knowledge transfer to team members.
...
Advantages
- This will be 100 % REMOTE work to start . ( Office presence, if required, will be at Manager’s discretion once the company returns to a finalized return to office policy. Office locations are in Toronto and Ottawa.
Responsibilities
Services:
The contractor will provide the following services:
1. Configure, update, implement, monitor, assess, and respond to alerts, recommendations, and findings reported by AWS detective controls such as AWS GuardDuty, Security Hub, Trusted Advisor, IAM
Access Analyzer, CloudWatch Anomaly Detection, etc.
2. Establish organizational security and compliance guardrails within the cloud environment using services such as AWS Config, Service Control Policies, Tag Policies, Permission Boundaries, AWS
Firewall Manager, etc.
3. Engage in root-cause analysis using tools such as Amazon Detective, AWS CloudTrail, CloudWatch Logs Insights, and VPC Flow Logs
4. Assist in operations automation for security-related tasks such as patch management, building EC2 images, and container image scanning.
5. Manage and improve network access control in AWS using a third-party firewall
6. Integrate and collect AWS logs and events into Splunk using AWS CloudTrail, SQS, SNS, and the Splunk App for AWS.
7. Acquire visibility and insight of the cloud environment and of CIHI services through the use and configuration of Splunk.
8. Ensure that all cloud solutions adhere to enterprise cloud security and compliance controls using frameworks such as the AWS Well-Architected Security Pillar
9. Develop processes, in the form of playbooks and runbooks, for incident response affecting the cloud environment as per CIHI’s security incident protocols.
10. Identify gaps and assist in improving AD/Azure AD, M365, MS Defender, ZScalar security posture.
11. Lead application security improvement initiatives including but not limited to SAST, DAST and other security best practices.
12. Consult on and provide requirements for critical projects and initiatives.
13. Raise the awareness level of cloud security within the organization.
14. Take initiatives and play an active role in continuously improving and advancing CIHI’s cloud environment by assessing overall risk and mitigation effectiveness in face of evolving network attacks
and threat vectors.
15. Document the operational aspects of security in the cloud with Standard Operating Procedures
16. Assist with the development, implementation and maintenance of CIHI’s ISMS policies and procedures.
17. Collaborate and must provide guidance, instruction, training, and knowledge transfer to team members.
Qualifications
QUALIFICATIONS
- Experience Implementing security in an AWS cloud environment
- Exp. Architecting enterprise systems and solutions with AWS
- Hands-on experience using/configuring CloudFormation, IAM, EC2/EBS, S3, ALB/ELB, Security Groups, Lambda, AWS Config, Secrets Manager
- Experience with firewall administration
- Experience with Splunk SPL
- Excellent communication skills for documentation and knowledge transfer
- Hands-on experience automating AWS findings and remediations
- Hands-on experience with dynamic/static application security testing and secure coding best practices.
- Hands-on experience with implementation of security best practices in AD/Azure AD, M365, ZScalar and MS Defender.
Summary
- Experience Implementing security in an AWS cloud environment
-- Exp. Architecting enterprise systems and solutions with AWS
Hands-on experience using/configuring CloudFormation, IAM, EC2/EBS, S3, ALB/ELB, Security Groups, Lambda, AWS Config, Secrets Manager
- Experience with firewall administration
- Experience with Splunk SPL
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
show more
Our client, a leader in the Health industry, is looking for a Security Specialist to join their team for an initial 1 year contract.
This person will assist in day-to-day security operations activities, implement security enhancements and improvements in their cloud environment and application development/management practices, provide consulting expertise to their projects, and provide guidance, instruction, training, and knowledge transfer to team members.
Advantages
- This will be 100 % REMOTE work to start . ( Office presence, if required, will be at Manager’s discretion once the company returns to a finalized return to office policy. Office locations are in Toronto and Ottawa.
Responsibilities
Services:
The contractor will provide the following services:
1. Configure, update, implement, monitor, assess, and respond to alerts, recommendations, and findings reported by AWS detective controls such as AWS GuardDuty, Security Hub, Trusted Advisor, IAM
Access Analyzer, CloudWatch Anomaly Detection, etc.
2. Establish organizational security and compliance guardrails within the cloud environment using services such as AWS Config, Service Control Policies, Tag Policies, Permission Boundaries, AWS
...
Firewall Manager, etc.
3. Engage in root-cause analysis using tools such as Amazon Detective, AWS CloudTrail, CloudWatch Logs Insights, and VPC Flow Logs
4. Assist in operations automation for security-related tasks such as patch management, building EC2 images, and container image scanning.
5. Manage and improve network access control in AWS using a third-party firewall
6. Integrate and collect AWS logs and events into Splunk using AWS CloudTrail, SQS, SNS, and the Splunk App for AWS.
7. Acquire visibility and insight of the cloud environment and of CIHI services through the use and configuration of Splunk.
8. Ensure that all cloud solutions adhere to enterprise cloud security and compliance controls using frameworks such as the AWS Well-Architected Security Pillar
9. Develop processes, in the form of playbooks and runbooks, for incident response affecting the cloud environment as per CIHI’s security incident protocols.
10. Identify gaps and assist in improving AD/Azure AD, M365, MS Defender, ZScalar security posture.
11. Lead application security improvement initiatives including but not limited to SAST, DAST and other security best practices.
12. Consult on and provide requirements for critical projects and initiatives.
13. Raise the awareness level of cloud security within the organization.
14. Take initiatives and play an active role in continuously improving and advancing CIHI’s cloud environment by assessing overall risk and mitigation effectiveness in face of evolving network attacks
and threat vectors.
15. Document the operational aspects of security in the cloud with Standard Operating Procedures
16. Assist with the development, implementation and maintenance of CIHI’s ISMS policies and procedures.
17. Collaborate and must provide guidance, instruction, training, and knowledge transfer to team members.
Qualifications
QUALIFICATIONS
- Experience Implementing security in an AWS cloud environment
- Exp. Architecting enterprise systems and solutions with AWS
- Hands-on experience using/configuring CloudFormation, IAM, EC2/EBS, S3, ALB/ELB, Security Groups, Lambda, AWS Config, Secrets Manager
- Experience with firewall administration
- Experience with Splunk SPL
- Excellent communication skills for documentation and knowledge transfer
- Hands-on experience automating AWS findings and remediations
- Hands-on experience with dynamic/static application security testing and secure coding best practices.
- Hands-on experience with implementation of security best practices in AD/Azure AD, M365, ZScalar and MS Defender.
Summary
- Experience Implementing security in an AWS cloud environment
-- Exp. Architecting enterprise systems and solutions with AWS
Hands-on experience using/configuring CloudFormation, IAM, EC2/EBS, S3, ALB/ELB, Security Groups, Lambda, AWS Config, Secrets Manager
- Experience with firewall administration
- Experience with Splunk SPL
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
show more
