Thales Canada Inc., Defence and SecurityCyber Security Specialist (Information Technology)Location: Fredericton - Knowledge Park, Canada In quick changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.Ottawa, ON. (CAN.), HybridPosition SummaryThales has a vacancy for a Cyber Security Specialist (Detection Engineer) is responsible for the prevention of Cybersecurity incidents by real-time monitoring, detection, and analysis of potential intrusions. This includes using troubleshooting tools to analyze and respond to cyber threats, writing scripts to aid in quick analysis and response, and responding to security events. The position operates and tunes security tools, provides requirements for new security capabilities and creates use cases for monitoring.Regulatory Compliance RequirementThis position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List and/or the US the Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access.Key Areas of ResponsibilityAs a Cyber Security Specialist (Intermediate), you will operate independently across cloud security operations and Dev Sec Ops, working alongside the CSOC and Dev Ops teams to detect, investigate, and remediate security risks in a Microsoft Azure workplace. You will contribute to measurable improvements in detection coverage, vulnerability remediation, detection engineering, pipeline security, and compliance posture.Security Monitoring & Incident ResponseMonitor and triage alerts from Microsoft Defender for Cloud and Microsoft Sentinel, working in partnership with the CSOC.Investigate suspicious activity and security incidents, perform root cause analysis, and elevate to senior staff or engineering partners when required.Maintain accurate incident tracking and documentation throughout the investigation and remediation lifecycle.Vulnerability & Configuration ManagementConduct and review vulnerability scan results and platform security recommendations, prioritizing remediation by risk.Validate Azure resource configurations (e.G., NSGs, Key Vault, Storage) against hardening standards and best practices.Coordinate remediation efforts with Dev Ops teams and track items through to closure.Identity & Access ManagementReview Azure AD (Entra ID)



roles and enforce least-privilege access.Monitor Privileged Identity Management (PIM) activity and audit service principals and managed identities.Verify MFA and conditional access compliance across the environment.Compliance & GovernanceSupport alignment with applicable security frameworks and internal policies (e.G., CPCSC, ISO 27001, NIST 800, ITSG).Review Azure Policy and compliance scores, and flag deviations for remediation.Support audit requests and maintain accurate supporting documentation and evidence.Security AutomationDevelop automation for recurring security checks and remediation tasks.Enhance monitoring, detection, and alerting processes over time.Additional ResponsibilitiesDashboards Creation / UpdateDetection rules Creation / Regular review / UpdateQALog ParsingPreparation and participation to steering committeeAdmin of QRadarMonitoring of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)Compliance of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)Security best practices applicationIncident response / Crisis managementMinimum QualificationsEducationBachelor's degree in computer science, Computer/Software Engineering, Information Security, or a related technical discipline; or an equivalent combination of post-secondary education and relevant hands-on experience.Experience3-5 years of hands-on experience in cloud security, security operations, detection engineering, or incident responseDemonstrated experience working independently on day-to-day security operations, with the judgment to recognize when to elevate complex or high-impact decisions.Experience working within a structured incident response process and collaborating with a SOC/CSOC.Technical / Specialized SkillsHands-on experience with Microsoft Azure security tooling, specifically Microsoft Defender for Cloud and Microsoft Sentinel (alert triage, investigation, and detection tuning).Experience with Azure cloud security configuration and hardening (NSGs, Key Vault, Storage, Azure Policy, compliance scoring).Experience with IBM QRadar, and Palo Alto XSOAR.Experience securing CI/CD pipelines in Azure Dev Ops and/or Git Hub, including SAST, dependency,



and container image scanning.Working knowledge of Azure AD (Entra ID) identity and access management — RBAC, least privilege, PIM, service principals, managed identities, MFA, and conditional access.Experience writing and tuning detections using query languages (e.G., KQL).Scripting and automation experience (e.G., Power Shell, Python) to support security checks, and remediation.Familiarity with vulnerability management concepts and security hardening baselines.Working knowledge of common attacker tactics, techniques, and procedures (e.G., MITRE ATT&CK).Eligibility / ClearanceMust be eligible to obtain and maintain the security clearance required for the role, and to meet Controlled Goods Program and applicable export-control requirements.Preferred QualificationsCertifications that cover the principles of Cybersecurity such as the GSEC, Security+, or CISSPAdvanced or specialized certifications such as:SC-200GIAC GCFA/GCIH/GCIAOffsec OSCPPay TransparencyThe anticipated Total Target Compensation (TTC), inclusive of annual salary and bonus eligibility, for this role is $120,000 to 140,000 CAD Annual. The Company reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant's status protected by local, provincial, and federal laws.AIWe use artificial intelligence-enabled tools as part of our recruitment process to support activities such as candidate discovery, résumé matching, and interview scheduling. These tools may help screen and assess applications and recommend potential matches based on the requirements within the job description. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters. Artificial intelligence does not make hiring decisions on our behalf.What We OfferThales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:Company paid Extended Health, Dental, HSA, Life, AD&DD, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.Retirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.Company paid holidays, vacation days, and paid sick leave.Voluntary Life, AD&DD, Critical Illness, Long-Term Disability.Employee Discounts on home, auto, and gym membership.Why Join Us?Say HI and learn more about working at Thales#J-18808-Ljbffr

📌 Cyber Security Specialist (Quebec City)
🏢 Canadian Inclusion
📍 Quebec City