Security Operations Administrator

JOB TITLE:

Security Operations Administrator FAMILY:
Information Technology II. ROLE

Latecoere Aerostructure Canada (Avcorp Industries Inc.) operates in a U.S. Department of Defense (DoD) environment and handles Controlled Unclassified Information (CUI). To support compliance with Cybersecurity Maturity Model Certification (CMMC) 2.0 Level 2, the company is strengthening its operational cybersecurity capabilities.

The expected salary range for this position is $100,000–$120,000 per year. Placement within the range will be determined based on the successful candidate’s qualifications, experience, and other job-related factors.

• Support the day-to-day execution of CMMC Level 2 controls.
• Maintain compliance documentation, including the System Security Plan (SSP), Plan of Action and Milestones (POA&M), and supporting evidence.
• Track remediation actions and security improvements.
• Ensure systems handling CUI follow defined security standards.

• Operate and monitor endpoint detection and response (EDR), security information and event management (SIEM), and identity and access control tools.
• Investigate security alerts and elevate issues when required.
• Support system hardening and secure configurations.
• Work with IT teams to resolve security issues.

• Participate in incident detection, analysis, and response, and coordinate security incidents involving CUI.
• Ensure incidents are documented, reported, and investigated in accordance with company policy.
• Manage vulnerability identification, tracking, remediation follow-up, and closure.

• Keep security documentation current and aligned with actual systems, configurations, and operating practices.
• Collect and maintain audit evidence, including logs, screenshots, and configuration records.
• Support internal and external audits.

• Work closely with IT, infrastructure, and Group security teams.
• Support the secure implementation of new systems and changes.
• Contribute to security awareness activities.

• Protect CUI and other sensitive information in accordance with approved security policies and access controls.
• Follow applicable company safety, environmental, and governance requirements, and report hazards or security control gaps to the appropriate lead.
• Timeliness of security alert investigation, incident documentation, and escalation against agreed response expectations.
• Completion of assigned vulnerability remediation and compliance actions by agreed due dates.
• Accuracy, completeness, and currency of security documentation and audit evidence.

• Administer assigned security tools and controls within approved access permissions and procedures.
• Collect security evidence and coordinate remediation follow-up with responsible teams.
• Escalate incidents, control gaps, and changes requiring approval to the appropriate IT or Group security lead.

• Triage alerts and prioritize routine follow-up using defined severity criteria and procedures.
• Determine when findings or proposed changes require escalation and follow approved incident and change procedures.

• Education:
  
  Degree in Cybersecurity, Information Technology, or equivalent.
• Experience:
  
  4 or more years in IT or cybersecurity, such as security operations centre (SOC), system administration, or security operations roles.
• Initial exposure to CMMC, NIST SP 800-171, or similar frameworks is an asset.

• Comply with company policies, Code of Conduct, Safety and Environmental policies.
• Follow all safety requirements as explained during the onboarding
• Promote ethical behavior and customer focus.
• Support a collaborative, high-performance culture.