Cyber Security Specialist

## Cyber Security Specialist Apply:
Hybrid:
Fredericton
- Knowledge Park:
Full time:
Posted Today:
R0342228

Location:

Fredericton
- Knowledge Park, Canada In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.
** Ottawa, ON. (CAN.), Hybrid
**** Position Summary
** Thales has a vacancy for a
** Cyber Security Specialist (Detection Engineer)
** is responsible for the prevention of Cybersecurity incidents by real-time monitoring, detection, and analysis of potential intrusions. This includes using troubleshooting tools to analyze and respond to cyber threats, writing scripts to aid in quick analysis and response, and responding to security events. The position operates and tunes security tools, provides requirements for new security capabilities and creates use cases for monitoring.
** Regulatory Compliance Requirement
** This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List and/or the US the Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access.
** Key Areas of Responsibility
** As a Cyber Security Specialist (Intermediate), you will operate independently across cloud security operations and Dev Sec Ops , working alongside the CSOC and Dev Ops teams to detect, investigate, and remediate security risks in a Microsoft Azure environment. You will contribute to measurable improvements in detection coverage, vulnerability remediation, detection engineering, pipeline security, and compliance posture.
* Security Monitoring & Incident Response
** Monitor and triage alerts from Microsoft Defender for Cloud and Microsoft Sentinel, working in partnership with the CSOC.
* Investigate suspicious activity and security incidents, perform root cause analysis, and escalate to senior staff or engineering partners when required.
* Maintain accurate incident tracking and documentation throughout the investigation and remediation lifecycle.
* Vulnerability & Configuration Management
** Conduct and review vulnerability scan results and platform security recommendations, prioritizing remediation by risk.
* Validate Azure resource configurations (e.g., NSGs, Key Vault, Storage) against hardening standards and best practices.
* Coordinate remediation efforts with Dev Ops teams and track items through to closure.
* Identity & Access Management
** Review Azure AD (Entra ) roles and enforce least-privilege access.
* Monitor Privileged Identity Management (PIM) activity and audit service principals and managed identities.
* Verify MFA and conditional access compliance across the environment.
* Compliance & Governance
** Support alignment with applicable security frameworks and internal policies (e.g., CPCSC, ISO 27001, NIST 800, ITSG).
* Review Azure Policy and compliance scores, and flag deviations for remediation.
* Support audit requests and maintain accurate supporting documentation and evidence.
* Security Automation
** Develop automation for recurring security checks and remediation tasks.
* Enhance monitoring, detection, and alerting processes over time.
• Dashboards Creation / Update
• Detection rules Creation / Regular review / Update
• QA•
Log Parsing
• Preparation and participation to steering committee
• Admin of QRadar
• Monitoring of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)
• Compliance of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)
• Security best practices…