Senior Specialist - Cybersecurity

As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation. For more information, please visit www.sunocolp.com.

Sunoco LP is a leading energy infrastructure and fuel distribution master limited partnership operating across 32 countries and territories in North America, the Greater Caribbean, and Europe. The Partnership’s midstream operations include an extensive network of approximately 14,000 miles of pipeline and over 160 terminals. This critical infrastructure complements the Partnership’s fuel distribution operations, which distribute over 15 billion gallons annually to approximately 11,000 Sunoco and partner-branded retail locations, as well as independent dealers and commercial customers.

At Sunoco, we take great pride in what we do and wholeheartedly believe our employees drive success for our company and our customers. We are always looking for the best and brightest talent and are committed to making your job a challenging and rewarding experience.

Competitive Benefits. Meaningful Extras. Unmatched Value.

• A place where you can take your career in the direction you want to grow and go

The Opportunity:

The Senior Security Specialist is responsible for supporting and enhancing the organization's cybersecurity operations through proactive threat detection, incident response, vulnerability management, and risk assessment activities. This role works closely with technical teams, business stakeholders, and technology partners to identify security risks, respond to security incidents, implement security controls, and continuously improve the organization's security posture.

The successful candidate will leverage industry frameworks, security technologies, and analytical expertise to protect enterprise systems, applications, networks, and data from evolving cyber threats.

Responsibilities:

• Serve as a security subject matter expert supporting security operations, incident response, vulnerability management, and cyber risk assessment initiatives across the organization.
  
• Monitor and analyze security events, alerts, logs, and threat intelligence sources to identify potential threats, suspicious activity, and indicators of compromise.
  
• Lead or coordinate incident response activities, including investigation, containment, eradication, recovery, root cause analysis, and post-incident reporting.
  
• Conduct detailed investigations of cybersecurity incidents and provide timely recommendations to reduce risk and prevent recurrence.
  
• Support the ongoing operation and optimization of security monitoring and detection capabilities, including SIEM, EDR/XDR, IDS/IPS, email security, and other security platforms.
  
• Manage vulnerability management activities, including vulnerability assessments, prioritization, remediation tracking, validation, and reporting.
  
• Partner with infrastructure, application, and business teams to ensure timely remediation of identified security vulnerabilities and risks.
  
• Conduct security risk assessments for applications, infrastructure, projects, third-party solutions, and technology initiatives, providing actionable recommendations to address identified risks.
  
• Perform security reviews of existing and emerging technologies to ensure compliance with organizational security standards, policies, and regulatory requirements.
  
• Prepare reports, findings, and recommendations related to security incidents, vulnerabilities, risk assessments, and security posture improvement initiatives.
  
• Research emerging cyber threats, attack techniques, vulnerabilities, and security technologies, applying insights to strengthen organizational defenses.
  
• Develop, maintain, and improve security procedures, standards, playbooks, and operational documentation to support effective security operations.
  
• Participate in security audits, compliance assessments, and control reviews to ensure adherence to security and regulatory requirements.
  
• Collaborate with cross-functional teams to implement security controls and operational improvements that reduce organizational risk and improve resilience.
  
• Support continuous improvement initiatives that enhance threat detection, incident response effectiveness, vulnerability management processes, and overall security operations maturity.

Education:

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• Relevant industry certifications such as Security+, GSEC, GCIH, CISSP, CISM, GIAC, CCSP, or equivalent certifications are considered an asset.

Requirements:

• 3-5 years of experience in Cybersecurity, Security Operations, Incident Response, Vulnerability Management, Risk Assessment, or a related information security discipline.
• Experience monitoring, investigating, and responding to cybersecurity incidents within enterprise environments.
• Experience coordinating vulnerability management activities, including remediation prioritization, stakeholder engagement, and reporting.
• Knowledge of security frameworks and standards, including NIST, CIS Controls, and OWASP.
• Experience conducting security risk assessments and developing practical risk mitigation recommendations.
• Hands-on experience with security technologies such as SIEM, EDR/XDR, email security platforms, vulnerability scanners, and security monitoring tools.
• Familiarity with threat detection methodologies, incident response processes, and cyber threat intelligence concepts.
• Strong analytical, investigative, and troubleshooting skills with the ability to assess security risks and recommend appropriate corrective actions.
• Ability to communicate technical security concepts effectively to both technical and non-technical stakeholders.
• Experience working in cross-functional environments and managing multiple priorities in a fast-paced setting.
• Demonstrated commitment to continuous learning and staying current with evolving cybersecurity threats, technologies, and best practices.
• 5-day-per-week, in-office requirement.

Desired Skills

• Experience with firewall and proxy administration.
  
• Working knowledge of security monitoring, log analysis, and threat detection processes.
  
• Strong understanding of networking concepts and protocols, including TCP/IP, DNS, HTTP/S, VPN, LAN, and WAN environments.
  
• Understanding of network access controls, identity and access management, and authentication technologies.
  
• Experience with Cisco security technologies and related security platforms.
  
• Experience with vulnerability assessment and management tools.
  
• Familiarity with threat hunting and cyber threat intelligence practices.
  
• Strong analytical, problem-solving, and investigative capabilities.
  
• Excellent written, verbal, and interpersonal communication skills.
  
• Ability to collaborate effectively with technical teams, business stakeholders, and external partners.
  
• Awareness of emerging cybersecurity technologies and trends, including the application of Artificial Intelligence and Machine Learning in cyber defense.

Humble. Hungry. Smart. Does this sound like you?

Do others describe you as being a down-to-earth achiever? Someone who thinks outside the box and always strives to do more than what is required? Someone who sees the bigger picture? You sound brilliant to work with!

We Want You To Shine:

We are committed to providing equal opportunities to all applicants. If you require accommodation due to a disability, you will have an opportunity to notify us when scheduling your interview.

Belonging Matters. Because You Do:

We are an equal opportunity employer and encourage applications from all qualified individuals. Our ability to work as one team across Canada, the United States, and the Caribbean is foundational to our success. We show up as our authentic selves each day and create space for one another’s unique contributions.

We respect the diverse cultures, traditions, and perspectives of Indigenous Peoples and seek to achieve equitable partnerships and opportunities with Indigenous communities.

The Fine Print:

Candidates must be legally eligible to work in the country in which they applied. Regrettably, we are unable to sponsor employment visas at this time.

Final candidates will be required to undergo a confidential pre-employment background check, including but not limited to educational, criminal, credit, drug and alcohol, and/or fitness for duty testing.