Senior Security Specialist

Putting people first, every day

BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award-winning environment that fosters a with a high priority on your personal and professional growth.

Your Opportunity

BDO Canada is looking for a Senior Security Specialist, a senior member of the Information Security team responsible for supporting the monitoring, detection, investigation, and response to cybersecurity threats across the organization. This existing role contributes to the continuous improvement of operational security capabilities, provides expertise in threat and vulnerability management, and helps protect BDO's systems, data, and digital assets.

Job Responsibilities

• Monitor, investigate, and respond to cybersecurity events, alerts, and incidents across enterprise environments.
• Perform detailed analysis of security incidents, including containment, remediation coordination, root cause analysis, and post-incident reviews.
• Administer and optimize security technologies that support monitoring, detection, prevention, and response capabilities across the enterprise.
• Conduct proactive threat and vulnerability analysis to identify risks and opportunities for improving security posture.
• Collaborate with technology teams to prioritize, track, and remediate security vulnerabilities and risks.
• Develop and maintain security procedures, response playbooks, and operational processes to improve the effectiveness of security operations.
• Conduct investigations and analysis to identify, contain, and remediate cybersecurity threats and incidents.
• Support security assessments, audits, and compliance activities by providing operational security expertise and evidence as required.
• Assist in evaluating, implementing, and maintaining security technologies and capabilities to strengthen the organization’s security posture.
• Contribute to security awareness and knowledge-sharing initiatives across technology teams and business stakeholders.
• Mentor junior team members and provide guidance on security processes, technologies, and best practices.
• Participate in on-call and incident response activities as required to support business continuity and operational objectives.

How do we define success for your role?

• You demonstrate BDO's core values through all aspect of your work: Integrity, Respect and Collaboration
• You understand our client’s industry, challenges, and opportunities; clients describe you as positive, professional, and delivering high-quality work
• You identify, recommend, and are focused on effective service delivery to our clients
• You share in an inclusive and engaging work environment that develops, retains, and attracts talent
• You actively participate in the adoption of digital tools and strategies to drive an innovative workplace
• You grow your expertise through learning and professional development

Qualifications & Requirements

• Degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent education and experience.
• 5+ years of progressive experience in cybersecurity, with a focus on security operations, incident response, threat detection, or cyber defense.
• Strong knowledge of security operations, incident response, threat detection methodologies, and cybersecurity practices.
• Experience working with enterprise security technologies supporting monitoring, detection, investigation, and response activities.
• Experience investigating security incidents and coordinating remediation activities across technology teams.
• Knowledge of cybersecurity frameworks, standards, and industry best practices.
• Experience supporting security capabilities across cloud, endpoint, identity, and enterprise technology environments is considered an asset.
• Strong analytical and problem-solving skills with the ability to assess risks and recommend practical security solutions.
• Ability to communicate complex technical concepts to technical and non-technical stakeholders in a clear and effective manner.
• Industry-recognized cybersecurity certifications are considered an asset.