We are seeking a hands-on Senior Cybersecurity Specialist with strong experience in threat detection, incident response, email security, and vulnerability management. The role will focus on investigating complex security incidents, threat hunting, email/BEC investigations, vulnerability risk prioritization, and driving remediation across enterprise environments.

Key Responsibilities

- Investigate and respond to security incidents using SentinelOne EDR or equivalent platforms.
- Perform threat hunting, malware analysis, IOC/TTP analysis, root-cause analysis, and incident containment.
- Investigate phishing, spear-phishing and BEC incidents using Abnormal Security, Microsoft Defender for Office 365, Exchange Online, and Microsoft 365.
- Analyze email headers, URLs, attachments, SPF, DKIM and DMARC configurations.
- Assess and prioritize vulnerabilities using Tanium or equivalent vulnerability-management platforms.
- Evaluate CVSS, exploitability,



exposure and business impact to determine remediation priority.
- Partner with infrastructure and application teams to drive vulnerabilities through remediation and closure.
- Produce clear technical investigation reports, risk assessments, and executive-level security reporting.

Required Skills

- 5–8+ years in Cybersecurity Operations, Incident Response, Threat Hunting or Vulnerability Management.
- Robust hands-on experience with SentinelOne/EDR, Abnormal Security or email-security platforms, and Tanium or equivalent.
- Strong knowledge of MITRE ATT&CK;, IOC/TTP analysis, malware analysis, BEC/phishing investigations and CVSS.
- Experience with Microsoft 365, Defender for Office 365, Exchange Online and Azure AD/Entra ID security.
- Strong investigative, RCA, stakeholder-management and remediation-governance skills.

📌 Senior Cybersecurity Specialist – Threat Detection & Vulnerability Management (Toronto)
🏢 HCLTech
📍 Toronto