Product Cybersecurity Specialist

## Product Cybersecurity SpecialistApply: Montreal (St. Laurent): Full time: Posted Today: 123467Our Technology & Product Development teams transform bold ideas into immersive, world-class solutions. From VR/AR solutions to cutting-edge flight simulation, you’ll work alongside brilliant minds in a rewarding and supportive environment with opportunities to learn and grow every day. With a career that blends flexibility, creativity, and impact, you’ll play a vital role in driving next-generation tech solutions for the moments that matter most.

Job Description
At CAE, our Technology & Product Development team is dedicated to shaping the future with immersive systems and pioneering technologies that elevate safety and readiness worldwide. From VR/AR solutions to cutting-edge flight simulation, you’ll work alongside brilliant minds in a rewarding and supportive environment with opportunities to learn and grow every day. Here are just a few reasons our staff enjoy working at CAE:
* Meaningful work that promotes professional development
* Opportunity to work and grow in the technology industry
* Collaborative work environment
* Be part of a high-performance team Your mission As a Product Cybersecurity Specialist, your mission is to create and implement various security solutions consisting of policies, standards, controls, processes and technological controls in information security, ensure technological monitoring, see to compliance and risk management in collaboration with the risk management team. Every day you will be called upon to work on CAE's high-tech products, whether it is the full flight simulator, classrooms, virtual solutions and medical equipment. Your roles and main responsibilities* Act as a cybersecurity specialist on CAE products
* Participate in product development projects for the defense and security, civil aviation
* Define the cybersecurity architecture, manage obsolescence and propose components of cybersecurity solutions for CAE products.
* Design and implement security measures and data recovery plans.
* Support installation, configuration, and validation activities.
* Participate in the upgrade of security solutions in the context of product update.
* Inspect the equipment to detect vulnerable access points and establish the mitigation plan.
* Act as a security expert and provide training, as needed, to the various engineering teams.
* Review the security requirements for the products (patches, controls, operating system evolution).
* Collaborate with management to ensure safety recommendations are in accordance with company, product and customer procedures.
* Collaborate with engineering departments to improve security compliance, manage risk and strengthen the effectiveness of solutions in place.
* Connect with industry to learn about trends to come up with innovative ideas.
* Recommend best practices to enhance security at all levels. As a member of the team
* Be an inspiring and motivating colleague
* Be a key contributor in the transformation of the company
* Share knowledge with team members and with other colleagues
* Contribute to a collaborative and stimulating work environment.
* Be an agent of change and a promoter of Agile thinking. Minimum

Qualifications:
* Bachelor's degree in computer science or engineering.
* Bilingualism (French and English) is MANDATORY
* A minimum of 5 years of experience, or a combination, in cybersecurity, specializing in software integration and systems administration (distributed or integrated systems).
* Knowledge of Windows and Linux operating systems.
* Knowledge of Cisco and Netgear network products
* Knowledge of firewalls and intrusion detection / prevention protocols.
* Knowledge of tools for vulnerability identification and aggregation of log entries (e.g. Rapid 7 Insight VM, Kiwi Syslog, Splunk, etc.)
* Demonstrate a sense of collaboration (teamwork)Prefered

Qualifications:
* Working knowledge of CAE simulation products, electrical / software interface technologies and simulation frameworks.
* Working knowledge of regulatory and industry data security standards (eg ITAR, CG, NIST, RGDP, JSP, CIS, CMMC) an asset.
* Knowledge of ISO 27001/27002, ITIL and COBIT frameworks and standards, an asset.
* One or more valid or pending certifications: CISSP, GSEC, CISA, CISM.
* TOGAF or SASBA certification, an asset.
* Knowledge of distributed system paradigms, shareable memory between processes, HLA, real-time infrastructure and virtualization, an asset. What we have to offer*

Benefits:
fully flexible so you can choose what's important
* Retirement: Defined benefit pension plan and group registered retirement savings plan (RRSP)
* Financial advantages: Workers' shareholding plan and numerous company discounts
* Personal and family programs: Physical well-being plan and complementary maternity benefits
* Work-life balance: Flexible hours and \"C