Aviation Cybersecurity Engineering Professional

Tech One IT; Dorval; Hybrid; CAD 110,000 - 160,000; Full time

Job summary

Bombardier is seeking an Aviation Cybersecurity Engineering Professional to advance aircraft cybersecurity certification and compliance across development platforms. You will define cybersecurity requirements, assess supplier architectures, and lead incident investigations while collaborating with multiple Bombardier departments.

The role requires a strong engineering background, at least 6 years in technical engineering with cybersecurity and aerospace experience, and knowledge of IT/SIS

Qualifications

• University-educated engineer in Software/IT/Computer Science/Electronics/Aerospace or equivalent.
• Minimum 6 years in a technical engineering field; at least 2 years in cybersecurity of networks and systems and 2 years in aerospace.
• Knowledge of computer networks, electronics, operating systems and software programming.
• Familiarity with aircraft system integration and civil certification is highly desired.
• Knowledge of IT or Aviation Information Security Management System principles.

Responsibilities

• Contribute to definition of aircraft and system level cybersecurity requirements.
• Review suppliers' system architecture and cybersecurity protection measures.
• Identify vulnerabilities in aircraft cybersecurity architecture and assess risks.
• Lead cybersecurity incident investigations and coordinate with suppliers and Bombardier stakeholders.
• Prepare and/or review design compliance reports and support regulatory design reviews.

Skills

Cybersecurity

Networking basics

Systems knowledge

English communication

Education

Engineering degree

Job description

Job Title: Aviation Cybersecurity Engineering Professional

Work Mode: Hybrid model (currently 2 days/week on-site, moving toward 3 days/week; select roles 100% on-site)

Location: Dorval, QC, CAN, H4S 1Y9

What are your contributions to the team?

In your role, you will contribute to the application of the cybersecurity certification and continuing airworthiness processes in support of all existing and new development platforms at Bombardier. In order to achieve this, you will:

• Contribute to the definition of aircraft and system level cybersecurity requirements.
• Review and assess suppliers’ system architecture and cybersecurity protection measures.
• Review the aircraft cybersecurity architecture, identify vulnerabilities and evaluate associated risks.
• Support cybersecurity penetration testing on aircraft and on various system rigs and lead snags investigation.
• Lead investigations of cybersecurity incidents and actively participate in the resolution of any deficiencies with suppliers and Bombardier stakeholders.
• Prepare and/or review design compliance reports and assist the Transport Canada Design Authority Delegates at Bombardier with the finding of compliance against applicable regulations.
• Closely collaborate with other Bombardier departments and disciplines (Avionics, RMAS, Completions, AWOR, Customer Support etc.) as required for the completion of the various tasks
• Participate to Bombardier preliminary and critical system design reviews
• Update and maintain Bombardier cybersecurity processes in line with regulatory requirements and best industry practices.
• Represent Bombardier in various conferences and industry committees on cybersecurity.
• Contribute to evolution of the CYBR (Aircraft Cybersecurity) domain and its roadmap
• Mentor less experienced professionals

How to thrive in this role?

As our ideal candidate,

• You hold a University engineering degree in Software, Information Technology, Computer Science, Electronics, Aerospace Engineering or equivalent.
• You have a minimum of 6 years of experience in a technical engineering field, including a minimum of 2 years in cybersecurity of networks and systems and 2 years in aerospace.
• You have general knowledge of computer network architectures, electronics, operating systems and software programming.
• You are familiar with the activities related to general aircraft system integration and civil aircraft certification, working knowledge is highly desired.
• You have knowledge of IT and/or Aviation Information Security Management System principles.
• You have working knowledge of aviation cybersecurity standards and guidance (highly desired):
• ED-201A / DO-391 - Aeronautical Information System Security Framework Guidance
• ED-202B / DO-326B - Airworthiness Security Process Specification
• ED-203A / DO-356A - Airworthiness Security Methods and Considerations
• ED-204A / DO-355A - Information Security Guidance for Continuing Airworthiness
• ED-206 / DO-392 - Guidance on Information Security Event Management
• CS 25.1319 Equipment, systems and network information protection
• You are ambitious and have a solid drive for results
• You have the ability to work autonomously, with little supervision.
• You are organized, a team player, self-motivated, customer focused, and able to work under pressure.
• You have demonstrated that you are pro-active, adaptable and flexible, you take initiative, you are innovative and have a strong sense of accountability and integrity.
• You have the ability to influence.
• You have strong oral and written English communications skills and functional French communication skills are desired.