Defensive Security Specialist
Sign up free to see how well your resume matches this role.
What you'll do
- Conduct initial triage and investigation of cyber security alerts using established procedures, playbooks, and escalation paths.
- Gather, preserve, and document relevant evidence from security tools, logs, endpoints, identity systems, cloud platforms, and network sources.
- Assess available evidence to determine likely scope, severity, and impact, escalating uncertainty or material risk promptly.
- Maintain clear case notes, timelines, investigation records, action trackers, and supporting evidence suitable for operational review.
- Support incident response, Major Incident Management, control validation, audit, compliance, and post-incident activities under guidance.
- Identify recurring alert patterns, documentation gaps, and opportunities to improve playbooks, detection quality, automation, alert tuning opportunities, and team practices.
- Participate in training, tabletop exercises, lessons learned, and operational coverage, including on-call or after-hours support where required.
- Participate in on-call duties as required.
What they're looking for
- Degree, diploma, relevant training, or equivalent practical experience in Computer Science, Computer Networking, Engineering, Cyber Security, or related discipline.
- Foundational understanding of cyber security operations, investigations, incident response, threat analysis, or comparable technical support work.
- Basic practical knowledge of SIEM, EDR, IDS/IPS, enterprise networking, identity, cloud, logging, and investigation technologies.
- Understanding common attack techniques, authentication, security controls, evidence handling, and the incident response lifecycle.
- Ability to analyze structured evidence, follow procedures, recognize gaps, and communicate when additional support or escalation is required.
- Clear written and verbal communication, strong attention to detail, discretion, accountability, curiosity, and willingness to learn.
Nice to have
- Entry-level certification such as Security+, GISF, or equivalent is an asset.
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.
At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.
When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.
Discover how you can make a difference in the lives of individuals, families and communities around the world.
Job Description:
Role Summary
The Defensive Security Specialist is a developing role within Sun Life's Security, Risk and Crisis Management (SRC) function. The role supports cyber security investigations, alert triage, evidence gathering, control validation, and security incident response while working within established procedures and under the guidance of more experienced analysts. The position builds technical capability, sound investigation habits, and an understanding of enterprise risk through structured operational work and continuous learning.
Key accountabilities include:
Conduct initial triage and investigation of cyber security alerts using established procedures, playbooks, and escalation paths.
Gather, preserve, and document relevant evidence from security tools, logs, endpoints, identity systems, cloud platforms, and network sources.
Assess available evidence to determine likely scope, severity, and impact, escalating uncertainty or material risk promptly.
Maintain clear case notes, timelines, investigation records, action trackers, and supporting evidence suitable for operational review.
Support incident response, Major Incident Management, control validation, audit, compliance, and post-incident activities under guidance.
Identify recurring alert patterns, documentation gaps, and opportunities to improve playbooks, detection quality, automation, alert tuning opportunities, and team practices.
Participate in training, tabletop exercises, lessons learned, and operational coverage, including on-call or after-hours support where required.
Participate in on-call duties as required.
Competencies
Degree, diploma, relevant training, or equivalent practical experience in Computer Science, Computer Networking, Engineering, Cyber Security, or related discipline.
Foundational understanding of cyber security operations, investigations, incident response, threat analysis, or comparable technical support work.
Basic practical knowledge of SIEM, EDR, IDS/IPS, enterprise networking, identity, cloud, logging, and investigation technologies.
Understanding common attack techniques, authentication, security controls, evidence handling, and the incident response lifecycle.
Ability to analyze structured evidence, follow procedures, recognize gaps, and communicate when additional support or escalation is required.
Clear written and verbal communication, strong attention to detail, discretion, accountability, curiosity, and willingness to learn.
Entry-level certification such as Security+, GISF, or equivalent is an asset.
Salary Range: €39,800 - €53,700
At our company, we are committed to pay transparency and equity. Your actual base salary will be determined based on your unique skills, qualifications, experience, and education. In addition to your base salary, this position is eligible for a discretionary annual incentive award based on your individual performance as well as the overall performance of the business. We are dedicated to creating a work environment where everyone is rewarded for their contributions.
Job Category:
IT - Technology ServicesPosting End Date:
30/09/2026Company
Company facts come from this company's own listings. We only show what the postings themselves carry.