The Senior Cyber Security Specialist, Cyber Incident Management will be a highly experienced and technically adept cybersecurity professional who will lead critical aspects of our security operations and incident response functions. We currently have a full‑time opportunity for a Senior Cyber Security Specialist - Cyber Incident Management. This role can be based out of one our main offices including: Act as a Senior SME for the Cyber Incident Management team, contributing to day‑to‑day security operations activities, including alert triage, investigation, and incident containment.

Provide expert guidance and mentorship to Cyber Incident Management Specialists, assisting them with complex investigations, troubleshooting, and decision‑making. SIEM, Firewall, WAF, EDR, IDS/IPS, Email Security Gateways), analyzing security logs, network traffic, and endpoint data to identify indicators of compromise (IOCs) and determine scope and impact. Prepare detailed and clear incident reports for various stakeholders, including technical teams and senior management.

Build a solid partnership with our Managed Security Service Provider (MSSP) for efficient alert escalation and collaboration by working hand‑in‑hand with them. Provide advanced technical support and guidance to other IT & Cyber teams on security best practices, emerging threats, and incident prevention strategies. An undergraduate degree or diploma in computer science, information security, or a related technical discipline. ~5+ years of progressive industry experience working in Cybersecurity operations,



with a significant focus on Incident Response and Security Operations (SecOps) leadership or senior roles. ~ network, endpoint, cloud, applications). ~ Strong understanding of network and system security concepts, including TCP/IP, operating systems (Windows, Linux), common attack vectors, and defensive strategies. ~ Ability to work outside of regular business hours, including nights and weekends, to respond to security incidents. ~ Excellent written and verbal communication skills, with the ability to articulate highly technical information clearly and concisely to diverse audiences, including senior management and non‑technical stakeholders. ~ Proven experience working directly in or closely with Managed Security Service Providers (MSSPs) at a senior or lead level.

Demonstrated experience in developing and implementing Digital Forensics and Incident Response (DFIR) programs, including handling complex and large‑scale incidents such as Business Email Compromise (BEC), Ransomware, or advanced persistent threats. Sobeys is one of Canada’s leading grocery retailers, with more than 1,600 stores across all 10 provinces and banners including Sobeys, Safeway, IGA, Foodland, FreshCo, Thrifty Foods, and Lawtons Drug Stores.



Our 128,000 teammates and franchise affiliates are passionate about delivering great food and exceptional experiences to our customers and communities.

Depending on role and eligibility, teammates may receive health and dental benefits, retirement and savings programs including an Employee Share Ownership Plan, a 10% in‑store discount at participating banners, virtual healthcare and an Employee and Family Assistance Program, learning and development opportunities, parental leave top‑up, and paid vacation. Sobeys is committed to providing a compensation structure that is flexible, equitable and competitive in the market to enable performance and growth. Individual compensation is determined based on qualifications, experience, and internal equity within the range provided.

External websites may share our organization’s job postings which includes compensation information based on similar roles and market benchmarks. These figures are provided for general comparison purposes only and are not issued or verified by our organization. We may use Artificial Intelligence (AI) tools to support efficiencies in the candidate screening, assessment, and recruitment processes.

These AI tools do not make hiring decisions on behalf of the Company. We will work with applicants requesting accommodation at any stage of the recruitment process. Successful candidates will be required to provide documentation to prove their legal ability to work in the position during the onboarding process.

📌 Senior Cyber Security Specialist - Cyber Incident Management (Vancouver)
🏢 Sobeys
📍 Vancouver