Embedded Cybersecurity Specialist - Pentester Profile

Quebec City, QC (Hybrid) Full Time

Job Summary

CortAIx Factory, based in Quebec City and Montreal, is recognized as a true accelerator of technological innovation for the Thales group and its clients. CortAIx's role is to extend Thales' influence within scientific and technical communities, offering a platform for innovation and knowledge sharing while attracting talented science and technology graduates to refine its expertise.

OUR TEAM

The cortAIx Factory Canada is dedicated to research and development (R&D;) work focused on the needs of the Department of National Defence (DND) as well as the Canadian Armed Forces (CAF). These projects, built around digital technologies, require a high level of expertise in a multitude of areas specific to the Canadian armed forces but also depth in complex system architecture. The challenges are very great and must take into account a panoply of parameters as much at the equipment level or even the particular environment of our clients. The team is composed of developers and artificial intelligence specialists.

As an embedded cybersecurity specialist:

- You will perform penetration tests on embedded platforms to determine vulnerabilities and advise clients on corrective measures to be taken to resolve them;
- You will propose and develop new tools or innovative testing techniques to improve the effectiveness of penetration tests currently in place;
- You will participate in reverse engineering processes within a multidisciplinary team to determine potential entry points of investigated complex systems;




- You will develop new effects on platforms under test to demonstrate potential impacts that a security flaw could have on this system and those connected to it.

Essential Functions

- Participate in software or hardware reverse engineering of certain embedded systems to understand their operation and identify potential vulnerabilities;
- Perform penetration tests on embedded systems;
- Develop and assemble test benches to perform cybersecurity tests;
- Perform tests to confirm vulnerabilities (observation or destructive);
- Develop tools to communicate with or analyze the behavior of embedded systems;
- Design, program and test software that can be deployed on embedded systems;
- Participate in the smooth running of activities within an Agile team (Sprint Planning, Daily Meeting, Sprint Review and Sprint Retrospective);
- Effectively document and communicate the results of tests performed;
- Perform all of these tasks in compliance with the team's best practices.

Minimum Requirements

- Bachelor's degree (or higher) in computer science, electronics or any other related and relevant field;
- 3 years of relevant experience in embedded systems and/or cybersecurity (junior, intermediate and senior profiles sought);
- Have an interest in the field of cybersecurity;
- Excellent communication skills, ability to listen and show openness to work with various stakeholders such as clients,



scientists and the development team;
- Valuable sense of organization, responsibilities and priorities;
- Intellectual curiosity, taste for learning and desire to diversify one's skills;
- Skills for teamwork and ability to promote collective intelligence;
- A keen sense of code quality as well as good programming and architecture practices is desired;
- Knowledge of scripting languages (Python, Bash, PowerShell) and programming languages (C/C++, C#, etc.);
- Mastery of Linux operation;
- Good command of spoken and written French; mastery of English is an asset, but not a requirement;

This position requires a good knowledge of English for the drafting of technical documents, to interact, support and/or provide services to international clients, employees and/or partners as well as to foreign government authorities who do not speak French.

Desirable Qualification

- Experience in hardware security of embedded system components;
- Analysis of side-channel leaks or fault injection on embedded systems to evaluate and validate hardware security at the component level;
- Experience with physical reading or probing techniques at the component level;
- Knowledge of disassembler software like IDA/Ghidra is an asset;
- A keen sense of code quality and good programming and architecture practices is desired;
- Experience with Agile development methods (Scrum, Kanban) is an asset;
- Interest in embedded systems;
- Intellectual curiosity, taste for learning and diversification;
- Aptitudes for teamwork and promoting collective intelligence;A good sense of professional ethics is essential.

This posit

📌 Embedded Cybersecurity Specialist (Quebec City)
🏢 Thales Canada
📍 Quebec City