3 month contract (not being extended)
Hybrid 1x per week in Toronto
Pay: $45-65/hr incorp
Required Qualifications
- 2-5+ years of hands-on experience in network/security engineering or security operations with strong firewall exposure.
- Working experience reviewing and interpreting firewall rules/policies, including the ability to analyze rule intent and map it to applications/services.
- Experience hands on in vulnerability management and threat detection
- Experience with enterprise firewall technologies, specifically Palo Alto and/or Check Point
- Familiarity with Cisco security technologies such as Cisco Firepower / Cisco IDS/IPS / ASA.
- Comfort working in a regulated environment with governance/compliance requirements
- Experience with ticketing systems and change management processes (creating change records, supporting CAB routines).
- Strong documentation skills and ability to work through high-volume, detail-oriented tasks accurately.
Nice-to-Have Qualifications
- Experience with Broadcom security products (e.g., web/SSL-related controls).
- Broader exposure to multiple security appliances/platforms (the more, the better).
- Prior experience updating/maintaining network or security architecture diagrams.
Job Description
Insight Global is looking for two Cybersecurity Specialists (Firewall & Threat Defense) to support a major Canadian financial institution’s cybersecurity team on a short-term engagement from August through October (3 months; no extension beyond October). These resources will help relieve full-time employees who are tied up on higher-priority initiatives by taking on firewall rule accreditation work and targeted BAU/security operations support across multiple security platforms.
Key Responsibilities
Firewall Rule Accreditation (Primary Deliverable)
- Review and analyze large volumes of firewall policies/rules (approximately 20,000 rules).
- Interpret firewall rule policies (source/destination, ports/services, zones, management/common rules).
- Associate/attest rules to the correct internal application codes and document findings as required for annual governance/compliance.
Firewall Operations Support (BAU)
- Assist with day-to-day firewall-related requests and administrative activities.
- Create and manage service tickets/requests as needed (certificates, access/changes, etc.).
- Change Management Support
- Create and maintain change records (CRs) in the change management system.
- Participate in/prepare for weekly Change Advisory Board (CAB) reviews and support change execution activities.
Technical Security Standards (TSS) & Compliance Support
- Support compliance activities for security appliances (identify misconfigurations, assist with remediation planning/execution via CRs).
Vulnerability Management Support (BAU)
- Support remediation efforts for lower-severity vulnerabilities (primarily P2/P3), escalating P1s to full-time team members per process.
Threat Defense Support (as needed)
- Support Cisco threat defense activities, including IDS/IPS context and tasks such as Snort signature update support (where applicable).
Documentation / Diagram Updates
- Update and maintain network/security diagrams to reflect current infrastructure and in-line/spanning deployments of security appliances.
We may use artificial intelligence tools to assist with the screening, assessment, or selection of potential applicants for this position.
