1 day ago
Montréal, CanadaSenior
Responsibilities
- Assess, implement, and manage cybersecurity and IT technologies integrated into the IPMS solution.
- Communicate cybersecurity concepts and provide guidance to software development, DevOps, and Integration & Test teams.
- Identify, assess, prioritize, and remediate system vulnerabilities based on risk and impact.
- Develop cybersecurity tools, scripts, and automation and contribute to security-relevant code when needed.
- Define and document cybersecurity requirements for software components and support compliance with security standards.
- Deploy, configure, and maintain cybersecurity solutions to improve the system’s security posture.
- Evaluate and strengthen the security architecture of complex systems and guide implementation to reduce attack surfaces.
- Support deployments directly onboard ships when required.
Requirements
- At least 10 years of cybersecurity experience as a Senior IT/Security Administrator, Security Engineer, or Security Architect in engineering-driven product development environments.
- Experience with hardware and software product development for on-premises platforms, embedded systems, or connected devices.
- Deep hands-on Linux system administration expertise, including LDAP, FreeIPA, Kerberos, RBAC, system hardening, patch and package management, SSH, certificate authentication, PKI, and certificate lifecycle management.
- Experience with identity and access management, privileged access management, directory services, centralized authentication and authorization, RADIUS, and TACACS+.
- Experience designing and securing enterprise or product networks, including segmentation, firewalls, IDS/IPS, VPNs, Zero Trust, IPsec, TLS, secure routing and switching, NAC, and monitoring.
- Knowledge of secure coding, OWASP Top Ten vulnerabilities, penetration testing, threat modeling, SAST, DAST, and SCA.
- Broad knowledge of vulnerability management, software configuration management, Platform as Code, endpoint security, virtualization, containerization, and cybersecurity governance.
- Experience establishing and enforcing cybersecurity frameworks, policies, and standards, including familiarity with NIST and ISO 27001.
- Hands-on scripting and automation experience with PowerShell, Bash, Python, Ansible, and Terraform.
- Familiarity with SIEM tools such as Splunk, QRadar, and ELK; endpoint protection platforms; and vulnerability scanners such as Nessus and OpenVAS.
- Cybersecurity certifications such as CompTIA Security+, CySA+, Linux+, RHCSA, GIAC, or OSCP are preferred.
- Familiarity with Atlassian tools is preferred.
- Strong communication, analytical, and decision-making skills are required.
- Fluency in English is required; French proficiency is an asset.
- Must be eligible for registration with the Controlled Goods Program and for Canadian Reliability and Secret Level 2/NATO Secret security clearances.
Benefits
- Montreal, Quebec location with a day-shift schedule.
- Potential opportunity to support deployments directly onboard ships.
- Equal opportunity workplace with pre-employment drug and alcohol testing and background checks.
- Eligibility for Canadian Reliability and Secret Level 2/NATO Secret clearance is required.
About L3Harris
L3Harris Technologies designs and manufactures communications, sensors, avionics, and space systems for defense, intelligence, and commercial aerospace customers, primarily selling to the U.S. and allied governments. The public company (NYSE: LHX) is headquartered in Melbourne, Florida, and was formed in 2019 by the merger of L3 Technologies and Harris Corporation. Offerings range from tactical radios and electronic warfare to ISR payloads and mission software, plus integration and sustainment services.