Cyber Security Specialist

Description

Customers around the world rely on the company's work in aerospace, transportation, defence, security and space, and the team designs new solutions for those markets.

Location: Fredericton, New Brunswick, Canada. Hybrid work model.

The team is hiring a Cyber Security Specialist (Detection Engineer) to prevent security incidents through real-time monitoring, detection and analysis of possible intrusions. The role uses troubleshooting tools to analyze and respond to cyber threats, writes scripts to speed up analysis and response, and handles security events. You will run and tune security tools, define requirements for new security capabilities and build monitoring use cases.

Export control: this role gives direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List and/or the US Export Administration Regulations (EAR). All applicants must be eligible now or able to obtain authorization for that access.

Responsibilities

• Work as an advanced analyst on investigations and incident response in IBM QRadar and Microsoft Sentinel.
• Administer the IBM QRadar platform and create detection content.
• Build and maintain security automation for recurring monitoring, security checks, incident response and remediation.
• Keep improving monitoring, detection, alerting and operational efficiency.
• Design, build and maintain security dashboards for monitoring, threat detection and reporting.
• Create, review, tune and maintain SIEM detection rules to improve visibility, cut false positives and cover new threats.
• Test and run quality assurance on security configurations, detection rules, automation and monitoring.
• Build and maintain log parsing, normalization and integration so security events are collected and analyzed accurately.
• Administer, configure, maintain and optimize the IBM QRadar SIEM, including health, performance, integrations and day-to-day support.
• Produce operational reports, security metrics and status updates, and take part in steering committee meetings to share progress, risks and priorities.

Requirements

• Bachelor's degree in computer science, computer or software engineering, information security or a related technical field, or an equivalent mix of post-secondary study and relevant hands-on experience.
• 3 to 5 years of hands-on experience in cloud security, security operations, detection engineering or incident response.
• Proven ability to work on day-to-day security operations on your own and to know when a complex or high-impact decision needs escalation.
• Experience working within a structured incident response process and with a SOC or CSOC.
• Hands-on experience with IBM QRadar and Microsoft Sentinel, including Microsoft Defender for Cloud, covering alert triage, investigation and detection tuning.
• Experience writing and tuning detections with query and scripting languages.
• Familiarity with vulnerability management and security hardening baselines.
• Working knowledge of common attacker tactics, techniques and procedures, such as MITRE ATT&CK.
• Ability to investigate complex incidents and find root causes.
• Ability to explain technical findings, risks and recommendations to both technical and non-technical audiences.
• Ability to work independently, set investigation priorities and make risk-based decisions.
• Ability to troubleshoot security tools and spot gaps in detection and monitoring.
• Must be eligible to obtain and keep the security clearance the role requires, and to meet Controlled Goods Program and applicable export-control rules.
• Preferred: certifications covering cybersecurity fundamentals, such as GSEC, Security+ or CISSP.
• Preferred: advanced or specialized certifications, such as SC-200, GIAC GCFA, GCIH or GCIA, or Offsec OSCP.

Conditions

Hybrid work model in Fredericton, New Brunswick, Canada.

Total target compensation, including annual salary and bonus eligibility, is $110,000 to $140,000 CAD per year.

The company may pay more or less than the posted range and may offer other benefits or compensation depending on circumstances unrelated to protected status under applicable laws.

Recruiters make all hiring decisions. AI-enabled tools help with sourcing, résumé matching and interview scheduling but do not make hiring decisions.

The company is an equal opportunity employer.

Benefits

• Full-time employees working 24 or more hours per week and their eligible dependents receive company-paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and a Well-Being program.
• Retirement savings plans (RRSP, DCPP, TFSA) with a company contribution and a DCPP match, with no vesting period.
• Company-paid holidays, vacation days and paid sick leave.
• Voluntary Life, AD&D, Critical Illness and Long-Term Disability cover.
• Employee discounts on home insurance, auto insurance and gym memberships.
• Accommodations are available at every stage of the interview process; ask when you are invited to interview.