ThreatLocker Support Specialist

Job Title: ThreatLocker Support Specialist
Location: Remote in Canada
Duration: 12+ months
Client: IBM Canada
Pay Range: C$45 to C$50

Introduction

This role is critical for ensuring endpoint application control remains secure and usable for engineering teams, particularly by acting as a dedicated support function during the stabilization phase of a "Default-Deny" rollout. In this role, you will be responsible for designing, implementing, auditing, and maintaining ThreatLocker policies across our organization (and/or client environments). You will play a critical role in preventing ransomware, malware, and unauthorized software execution by managing Application Whitelisting (Allowlisting), Ringfencing, Storage Control, and Elevation Control.

Required Skills & Qualifications

• Minimum of 3 years of hands-on experience specifically managing, configuring, and troubleshooting ThreatLocker in a production environment.
• 3 years of experience in System Administration, Helpdesk Tier 3, Network Engineering, or a Cybersecurity operations role.
• Deep, foundational knowledge of Windows OS (Registry, File Systems, Services, Active Directory, and Group Policy).
• Basic familiarity with PowerShell or Command Prompt for troubleshooting and automation.
• Prior work experience at client or in client's Industry

Preferred Skills & Qualifications

• Experience with macOS or Linux.
• ThreatLocker Professional or ThreatLocker Expert certifications.
• CompTIA Security+, CySA+, or Network+.

Day-to-Day Responsibilities

• Design, implement, and maintain ThreatLocker Application Allowlisting policies to ensure only authorized software can execute.
• Configure and manage Ringfencing policies to restrict what authorized applications can do.
• Implement and manage least-privilege access, creating rules for users to run specific applications as administrators without granting full local admin rights.
• Monitor and process daily ThreatLocker approval requests from users efficiently, balancing security with operational productivity.
• Investigate blocked files, denied executions, and policy violations using ThreatLocker audit logs.

.

For immediate consideration, please click APPLY to begin the screening process with Alex.