Information Security Specialist

Named #4 startup in Canada for 2024, Hiive is a fintech/marketplace startup connecting buyers and sellers of stock in venture-backed pre-IPO companies🚀. Thanks to our industry-leading technology and best-in-class capital markets team, we are home to the fastest-growing marketplace for the stock of “unicorns” on the planet. As a profitable and rapidly growing business backed by US venture capital investors, we are seeking to scale our high-performing team.

Interested in learning more about life at Hiive? Check out our careers page to see how you can grow with us!

As an Information Security Specialist at Hiive, you will play a pivotal role in safeguarding Hiive's digital assets by implementing and managing security tools, proactively monitoring for and responding to threats, and collaborating across teams to maintain a strong security posture.

In this role, your responsibilities would include:

Security Tool Implementation & Management

• Deploying, configuring, and maintaining various security solutions, including but not limited to:

  • Endpoint Detection and Response (EDR);

  • Identity and Access Management (IAM);

  • Zero Trust Network Access (ZTNA) solutions;

  • Secure Web Gateway (SWG);

  • Email security gateways and filtering systems;

  • Data Loss Prevention (DLP) tools;

  • Security awareness training platform.

• Ensuring security tools are properly integrated, updated, and operating effectively.

• Developing and managing security policies and configurations within these tools based on best practices and organizational requirements.

• Troubleshooting issues related to security tool performance and functionality.

• Evaluating and recommending new security technologies to enhance the organization's security posture.

Security Monitoring & Alert Investigation

• Monitoring security alerts and logs from various systems (EDR, SIEM, firewalls, etc.).

• Analyzing security events to identify potential threats, intrusions, and policy violations.

• Investigating security alerts, determining root causes, assessing impact, and differentiating between false positives and genuine threats.

• Documenting investigation findings clearly and concisely.

Incident Response Support

• Assisting the security team in responding to security incidents according to established Incident Response Plans.

• Participating in containment, eradication, and recovery activities during security incidents.

• Helping collect and preserve evidence for forensic analysis and post-incident review.

• Contributing to post-incident analysis and reporting to identify lessons learned and recommend improvements.

Collaboration & Documentation

• Collaborating with IT and infrastructure teams, application owners, and other stakeholders to implement and manage security controls.

• Maintaining clear and accurate documentation for security tool configurations, processes, and procedures.

• Staying current with the latest cybersecurity threats, vulnerabilities, and technology trends.

Required Skills:

• 4+ years of hands-on experience in an information security capacity.

• Demonstrable experience implementing, configuring, and managing security tools such as EDR, IAM, ZTNA, Web filtering, Email Security, and DLP.

• Experience investigating security alerts, analyzing logs, and participating in security incident response processes.

• Solid understanding of core information security principles, networking concepts, and operating system security fundamentals (Windows, macOS, Linux).

• Strong analytical, problem-solving, and critical-thinking skills.

• Excellent communication and collaboration abilities.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, OR equivalent practical work experience.

Preferred Skills:

• Relevant industry certifications such as CompTIA Security+, CySA+, GSEC, CEH, or specific vendor certifications.

• Experience working with Security Information and Event Management (SIEM) platforms.

• Familiarity with vulnerability management tools and processes.

• Scripting skills for automation or analysis (e.g., Python, PowerShell).

• Knowledge of cloud security concepts and experience with platforms like AWS or GCP.

Compensation, Benefits, & Perks: 

• Highly competitive salary commensurate with experience and contribution.

• Opportunity to participate in ownership of a rapidly growing early-stage startup through our employee stock option plan.

• Comprehensive 100% employer-paid health and dental premiums, a health and personal spending account.

• A dedicated desk in our Vancouver, BC HQ, in the heart of downtown, with a fridge stocked with healthy snacks and drinks, an onsite gym, and a gorgeous rooftop amenity.

• Enjoy a $20-per-day commuter benefit for every day you work in our Vancouver HQ.

• An engaging social calendar, including bi-weekly catered lunches, bi-weekly “Friday bar,” team workouts, annual summer party, and holiday party, two “onsite” all-team retreats each year, semi-annual team-building events, and Hiive Womens’ Network events.

• Significant opportunities for growth into team leadership and management roles.

• Entrepreneurial culture and a small and dynamic team.

• Sponsorship, immigration, and relocation for exceptional candidates.

Hiive is committed to fostering an inclusive workplace where all individuals have an opportunity to succeed.