Cybersecurity Engineer

Cybersecurity Engineer

Location:

Ontario Remote Worker, Canada.

In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make tomorrow's possible.

Cyberattacks have been on the rise around the globe, with hackers and other criminals targeting businesses large and small to steal valuable information or bring computer networks to a halt. Cyber Security Engineers are valued for their ability to protect an organization’s information and systems from such attacks. This position is responsible for providing ongoing information security services to all aspects of the on premise, cloud and corporate IT environments.

It requires working across several security functions with a strong primary focus on vulnerability management and security awareness activities.

• Lead cyber incident response activities and coordinate remediation actions across multiple teams.
• Have working knowledge of threat actor tactics and techniques.
• Perform digital forensics on Thales devices as part of the incident response process and investigations.
• Help assess current security monitoring posture and engage vendors to drive improvements in their service.
• Support investigations with HR and Legal teams and present findings to stakeholders around access management, security investigations and actions requiring data gathering and analysis.
• Work with stakeholders to partner on remediating vulnerabilities in systems.
• Have experience with deploying and monitoring Endpoint Detection & Response tools across workstations and servers.
• Help define technical security requirements and recommendations on new IT and business projects.
• Identify cybersecurity risks and recommend/deploy controls to mitigate risks or reduce to an acceptable level.
• Act as a technical lead and work with IS/IT teams on topics such as EDR/XDR, E‑Mail security, tool configuration and deployment, system defense hardening, etc.
• Provide input to help mature all Security Monitoring and Incident Response processes.
• Provide security engineering solutions and support during incidents, proactively considering the prevention of similar incidents from occurring in the future.
• Develop a plan to mature the Security Monitoring program and engage with vendor on process improvements.

• Bachelor’s degree in computer information systems, programming, engineering or a related field with a minimum of 5+ years of relevant work experience in information technology and security, responding to security incidents and performing investigations, or an equivalent combination of education and experience.
• 5 to 7 years of experience in Cybersecurity domains.
• 3 to 5 years of experience in responding to Security events with ability to document remediation steps and lessons learned.
• Strong knowledge of core IT and Security infrastructures including Active Directory, Microsoft Windows security controls, SIEM, AV, IPS, vulnerability scanners etc.
• Must be able to work with minimal direction in an office without any team members in the same location.
• Strong communication, negotiation and analytical skills.

• Strong knowledge of all aspects of information security within the Prevent, Detect and Respond domains.
• Highly analytical and detail-oriented, with organizational skills to manage assigned work to completion.

• Company paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.
• Retirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.
• Company paid holidays, vacation days, and paid sick leave.
• Voluntary Life, AD&D, Critical Illness, Long-Term Disability.
• Employee Discounts on home, auto, and gym membership.

This role requires eligibility for access to trade-controlled technologies, including Controlled Goods Program clearance and Secret Security…