Sunoco LP
The Senior Security Specialist is responsible for supporting and enhancing the organization's cybersecurity operations through proactive threat detection, incident response, vulnerability management, and risk assessment activities. This role works closely with technical teams, business stakeholders, and technology partners to identify security risks, respond to security incidents, implement security controls, and continuously improve the organization's security posture.
The successful candidate will leverage industry frameworks, security technologies, and analytical expertise to protect enterprise systems, applications, networks, and data from evolving cyber threats.
Responsibilities:
- Serve as a security subject matter expert supporting security operations, incident response, vulnerability management, and cyber risk assessment initiatives across the organization.
- Monitor and analyze security events, alerts, logs, and threat intelligence sources to identify potential threats, suspicious activity, and indicators of compromise.
- Lead or coordinate incident response activities, including investigation, containment, eradication, recovery, root cause analysis, and post-incident reporting.
- Conduct detailed investigations of cybersecurity incidents and provide timely recommendations to reduce risk and prevent recurrence.
- Support the ongoing operation and optimization of security monitoring and detection capabilities, including SIEM, EDR/XDR, IDS/IPS, email security, and other security platforms.
- Manage vulnerability management activities, including vulnerability assessments, prioritization, remediation tracking, validation, and reporting.
- Partner with infrastructure, application, and business teams to ensure timely remediation of identified security vulnerabilities and risks.
- Conduct security risk assessments for applications, infrastructure, projects, third-party solutions, and technology initiatives, providing actionable recommendations to address identified risks.
- Perform security reviews of existing and emerging technologies to ensure compliance with organizational security standards, policies, and regulatory requirements.
- Prepare reports, findings, and recommendations related to security incidents, vulnerabilities, risk assessments, and security posture improvement initiatives.
- Research emerging cyber threats, attack techniques, vulnerabilities, and security technologies, applying insights to strengthen organizational defenses.
- Develop, maintain, and improve security procedures, standards, playbooks, and operational documentation to support effective security operations.
- Participate in security audits, compliance assessments, and control reviews to ensure adherence to security and regulatory requirements.
- Collaborate with cross-functional teams to implement security controls and operational improvements that reduce organizational risk and improve resilience.
- Support continuous improvement initiatives that enhance threat detection, incident response effectiveness, vulnerability management processes, and overall security operations maturity.
Education:
Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
Relevant industry certifications such as Security+, GSEC, GCIH, CISSP, CISM, GIAC, CCSP, or equivalent certifications are considered an asset.
Requirements:
3-5 years of experience in Cybersecurity, Security Operations, Incident Response, Vulnerability Management, Risk Assessment, or a related information security discipline.
Experience monitoring, investigating, and responding to cybersecurity incidents within enterprise environments.
Experience coordinating vulnerability management activities, including remediation prioritization, stakeholder engagement, and reporting.
Knowledge of security frameworks and standards, including NIST, CIS Controls, and OWASP.
Experience conducting security risk assessments and developing practical risk mitigation recommendations.
Hands-on experience with security technologies such as SIEM, EDR/XDR, email security platforms, vulnerability scanners, and security monitoring tools.
Familiarity with threat detection methodologies, incident response processes, and cyber threat intelligence concepts.
Strong analytical, investigative, and troubleshooting skills with the ability to assess security risks and recommend appropriate corrective actions.
Ability to communicate technical security concepts effectively to both technical and non-technical stakeholders.
Experience working in cross-functional environments and managing multiple priorities in a fast-paced setting.
Demonstrated commitment to continuous learning and staying current with evolving cybersecurity threats, technologies, and best practices.
Desired Skills:
Experience with firewall and proxy administration.
Working knowledge of security monitoring, log analysis, and threat detection processes.
Strong understanding of networking concepts and protocols, including TCP/IP, DNS, HTTP/S, VPN, LAN, and WAN environments.
Understanding of network access controls, identity and access management, and authentication technologies.
Experience with Cisco security technologies and related security platforms.
Experience with vulnerability assessment and management tools.
Familiarity with threat hunting and cyber threat intelligence practices.
Strong analytical, problem-solving, and investigative capabilities.
Excellent written, verbal, and interpersonal communication skills.
Ability to collaborate effectively with technical teams, business stakeholders, and external partners.
Awareness of emerging cybersecurity technologies and trends, including the application of Artificial Intelligence and Machine Learning in cyber defense.
Additional Information:
As of the time of this posting, Sunoco is operating with an onsite work model. Candidates must be able to work onsite at the company's facilities.
Work Authorization:
Applicants must be authorized to work in the United States. Sunoco does not sponsor employment visas for this position.
Equal Opportunity Employer:
Sunoco is an equal opportunity employer. We value diversity and inclusion and are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, national origin, age, disability, or veteran status.
Application Process:
Interested candidates should apply through the company's career portal. Please ensure your resume and cover letter highlight your relevant experience and qualifications for this role.
Company Overview:
Sunoco is a leading energy company with a strong focus on innovation and sustainability. We are committed to providing safe, reliable, and affordable energy solutions to our customers while maintaining a strong commitment to environmental stewardship and community engagement.
Location:
Multiple locations across the United States.
Benefits:
Competitive salary, comprehensive health insurance, retirement plans, paid time off, and other benefits as outlined in the company's employee handbook.
Application Deadline:
Applications will be accepted until the position is filled. We encourage candidates to apply as soon as possible to ensure consideration.
Interview Process:
Selected candidates will be contacted for an interview. The interview process may include technical assessments, behavioral interviews, and/or group discussions.
Additional Notes:
For more information about this position or to apply, please visit the company's career portal at https://www.sunoco.com/careers.
Equal Opportunity Employer Statement:
Sunoco is an equal opportunity employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, national origin, age, disability, or veteran status. We encourage applications from all qualified candidates and are especially interested in hearing from veterans, individuals with disabilities, and members of underrepresented groups.
Application Instructions:
Applicants must submit a resume and cover letter through the company's career portal. Please ensure your application materials highlight your relevant experience and qualifications for this role.
Additional Resources:
For more information about Sunoco's mission, values, and culture, please visit https://www.sunoco.com/about-us.
Questions?