Cyber Security Specialist

thales; Fredericton; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Thales in Canada is seeking a Cyber Security Specialist (Detection Engineer) to monitor, detect, and analyze cyber threats in a hybrid cloud environment. You will tune Defender for Cloud and Microsoft Sentinel, triage alerts with the CSOC, and drive remediation with DevOps teams while aligning with security standards.

You will curate detection use cases, improve CI/CD security in Azure DevOps and GitHub, and coordinate vulnerability management, IAM governance, and audit-ready documentation.

Qualifications

• Bachelor's degree in computer science, information security, or related field or equivalent hands-on experience.
• 3–5 years of hands-on cloud security, detection engineering, or incident response.
• Experience with structured incident response processes and SOC/CSOC collaboration.

Responsibilities

• Monitor and triage alerts from Defender for Cloud and Sentinel; investigate incidents and perform root cause analysis.
• Manage vulnerability results and hardening of Azure resources (NSGs, Key Vault, Storage) and ensure remediation.
• Review Azure AD roles, enforce least privilege, monitor PIM and MFA/conditional access.
• Support compliance with security frameworks and policy audits; maintain documentation and evidence.
• Develop automation for recurring security checks and remediation; improve detection coverage over time.

Skills

Security operations

Incident response

Threat detection

Root cause analysis

Vulnerability management

Education

Bachelor's degree in Computer Science / Engineering / Information Security

Tools

Microsoft Defender for Cloud

Microsoft Sentinel

IBM QRadar

Palo Alto XSOAR

Azure DevOps

GitHub

Azure Policy

Job description

Location: Fredericton - Knowledge Park, Canada

In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.

Ottawa, ON. (CAN.), Hybrid

Position Summary

Thales has a vacancy for a Cyber Security Specialist (Detection Engineer) is responsible for the prevention of Cybersecurity incidents by real-time monitoring, detection, and analysis of potential intrusions. This includes using troubleshooting tools to analyze and respond to cyber threats, writing scripts to aid in quick analysis and response, and responding to security events. The position operates and tunes security tools, provides requirements for new security capabilities and creates use cases for monitoring.

Regulatory Compliance Requirement

This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List and/or the US the Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access.

Key Areas of Responsibility

As a Cyber Security Specialist (Intermediate), you will operate independently across cloud security operations and DevSecOps, working alongside the CSOC and DevOps teams to detect, investigate, and remediate security risks in a Microsoft Azure environment. You will contribute to measurable improvements in detection coverage, vulnerability remediation, detection engineering, pipeline security, and compliance posture.

Security Monitoring & Incident Response

• Monitor and triage alerts from Microsoft Defender for Cloud and Microsoft Sentinel, working in partnership with the CSOC.
• Investigate suspicious activity and security incidents, perform root cause analysis, and escalations to senior staff or engineering partners when required.
• Maintain accurate incident tracking and documentation throughout the investigation and remediation lifecycle.

Vulnerability & Configuration Management

• Conduct and review vulnerability scan results and platform security recommendations, prioritizing remediation by risk.
• Validate Azure resource configurations (e.g., NSGs, Key Vault, Storage) against hardening standards and best practices.
• Coordinate remediation efforts with DevOps teams and track items through to closure.

Identity & Access Management

• Review Azure AD (Entra ID) roles and enforce least-privilege access.
• Monitor Privileged Identity Management (PIM) activity and audit service principals and managed identities.
• Verify MFA and conditional access compliance across the environment.

Compliance & Governance

• Support alignment with applicable security frameworks and internal policies (e.g., CPCSC, ISO 27001, NIST 800, ITSG).
• Review Azure Policy and compliance scores, and flag deviations for remediation.
• Support audit requests and maintain accurate supporting documentation and evidence.

Security Automation

Develop automation for recurring security checks and remediation tasks.

Enhance monitoring, detection, and alerting processes over time.

• Dashboards Creation / Update
• Detection rules Creation / Regular review / Update
• QA
• Log Parsing
• Preparation and participation to steering committee
• Admin of QRadar
• Monitoring of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)
• Compliance of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)
• Security best practices application
• Incident response / Crisis management

Minimum Qualifications

Education

Bachelor's degree in computer science, Computer/Software Engineering, Information Security, or a related technical discipline; or an equivalent combination of post‑secondary education and relevant hands‑on experience.

Experience

• 3-5 years of hands‑on experience in cloud security, detection engineering, or incident response
• Demonstrated experience working independently on day‑day security operations, with the judgment to recognize when to escalation complex and high‑impact decisions
• Experience working within a structured incident response process and collaborating with a SOC/CSOC.

Technical / Specialized Skills

• Hands‑on experience with Microsoft Azure security tooling, specifically Microsoft Defender for Cloud and Microsoft Sentinel (alert triage, investigation, and detection tuning).
• Experience with Azure cloud security configuration and hardening (NSGs, Key Vault, Storage, Azure Policy, compliance scoring).
• Experience with IBM QRadar, and Palo Alto XSOAR.
• Experience securing CI/CD pipelines in Azure DevOps and/or GitHub, including SAST, dependency, and container image scanning.
• Working knowledge of Azure AD (Entra ID) identity and access management - RBAC, least privilege, PIM, service principals, managed identities, MFA, and conditional access.
• Exp