At a Glance
- Tasks: Monitor and respond to cyber threats while enhancing security measures in a dynamic environment.
- Company: Join Thales Canada, a leader in defence and security innovation.
- Benefits: Enjoy competitive salary, health benefits, and flexible work options.
- Other info: Great career growth opportunities and a supportive team culture.
- Why this job: Make a real impact in cybersecurity and protect vital information.
- Qualifications: 3-5 years in cloud security and hands-on experience with Microsoft Azure tools.
The predicted salary is between 120000 - 140000 $ per year.
Thales Canada Inc. has a vacancy for a Cyber Security Specialist (Detection Engineer) responsible for the prevention of Cybersecurity incidents by real-time monitoring, detection, and analysis of potential intrusions. This includes using troubleshooting tools to analyze and respond to cyber threats, writing scripts to aid in quick analysis and response, and responding to security events. The position operates and tunes security tools, provides requirements for new security capabilities, and creates use cases for monitoring.
Key Areas of Responsibility
- Operate independently across cloud security operations and DevSecOps, working alongside the CSOC and DevOps teams to detect, investigate, and remediate security risks in a Microsoft Azure environment.
- Contribute to measurable improvements in detection coverage, vulnerability remediation, detection engineering, pipeline security, and compliance posture.
Security Monitoring & Incident Response
- Monitor and triage alerts from Microsoft Defender for Cloud and Microsoft Sentinel, working in partnership with the CSOC.
- Investigate suspicious activity and security incidents, perform root cause analysis, and elevate to senior staff or engineering partners when required.
- Maintain accurate incident tracking and documentation throughout the investigation and remediation lifecycle.
Vulnerability & Configuration Management
- Conduct and review vulnerability scan results and platform security recommendations, prioritizing remediation by risk.
- Validate Azure resource configurations against hardening standards and best practices.
- Coordinate remediation efforts with DevOps teams and track items through to closure.
Identity & Access Management
- Review Azure AD (Entra ID) roles and enforce least-privilege access.
- Monitor Privileged Identity Management (PIM) activity and audit service principals and managed identities.
- Verify MFA and conditional access compliance across the environment.
Compliance & Governance
- Support alignment with applicable security frameworks and internal policies.
- Review Azure Policy and compliance scores, and flag deviations for remediation.
- Support audit requests and maintain accurate supporting documentation and evidence.
Security Automation
- Develop automation for recurring security checks and remediation tasks.
- Enhance monitoring, detection, and alerting processes over time.
Minimum Qualifications
- Bachelor's degree in computer science, Computer/Software Engineering, Information Security, or a related technical discipline; or an equivalent combination of post-secondary education and relevant hands-on experience.
- 3-5 years of hands-on experience in cloud security, security operations, detection engineering, or incident response.
- Demonstrated experience working independently on day-to-day security operations.
- Experience working within a structured incident response process and collaborating with a SOC/CSOC.
Technical / Specialized Skills
- Hands-on experience with Microsoft Azure security tooling, specifically Microsoft Defender for Cloud and Microsoft Sentinel.
- Experience with Azure cloud security configuration and hardening.
- Experience with IBM QRadar, and Palo Alto XSOAR.
- Experience securing CI/CD pipelines in Azure DevOps and/or GitHub.
- Working knowledge of Azure AD (Entra ID) identity and access management.
- Experience writing and tuning detections using query languages.
- Scripting and automation experience to support security checks and remediation.
- Familiarity with vulnerability management concepts and security hardening baselines.
- Working knowledge of common attacker tactics, techniques, and procedures.
Eligibility / Clearance
- Must be eligible to obtain and maintain the security clearance required for the role.
Preferred Qualifications
- Certifications that cover the principles of Cybersecurity such as the GSEC, Security+, or CISSP.
- Advanced or specialized certifications.
Pay Transparency
The anticipated Total Target Compensation (TTC), inclusive of annual salary and bonus eligibility, for this role is $120,000 to 140,000 CAD Annual.
What We Offer
Thales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents.
Cyber Security Specialist employer: Canadian Inclusion
Mariner is an exceptional employer that fosters a collaborative and innovative work culture in the vibrant city of Halifax, Nova Scotia. Employees benefit from ongoing professional development opportunities, competitive compensation, and a supportive environment that encourages creativity and teamwork. With a focus on cutting-edge technology solutions, Mariner empowers its team to make a meaningful impact while enjoying the unique lifestyle that Halifax has to offer.
