Cybersecurity Analyst & Information Security

BETA Technologies; Montreal (administrative region); On-site; CAD 80,000 - 100,000; Full time

Job summary

A leading aviation technology firm in Montreal is seeking a Cybersecurity Incident Analyst to enhance its information security operations. The role involves triaging incidents, documenting resolutions, and training staff on security protocols. Ideal candidates should have a strong background in information security, excellent communication skills, and a collaborative spirit. The company offers a competitive salary range of $80,000 - $100,000 annually, along with a commitment to diversity and inclusion.

Qualifications

• 5+ years of experience in information security or cybersecurity.
• Experience with continuous monitoring or incident response.
• Ability to interpret security information for non-practitioners.

Responsibilities

• Own functions of Information Security Operations program.
• Triage findings from Security Operations Center.
• Respond to information security incidents as part of the Incident Response Team.
• Train Team Members on Information Security Incident Response Protocol.

Skills

Strong understanding of information security principles

Teamwork orientation

Organizing information

Excellent written communication

Excellent verbal communication

Strong initiative

Education

Academic degree in information security/cybersecurity

SANS GIAC certification or equivalent

Job description

At BETA Technologies, we apply our intellectual curiosity, passion for aviation, and commitment to sustainability toward a shared mission of revolutionizing electric aviation. Regardless of the position one holds, each team member brings their talent and desire to positively impact the environment and lives of others in a refreshing, vibrant, and inclusive culture.

The Cybersecurity Incident Analyst is the lifeblood of BETA’s Information Security Operations program: pursuing findings from our Security Operations Center (SOC), tracking remediation, identifying opportunities for improvement to BETA’s Information Security posture, and maximizing BETA’s readiness to address information security incidents by resourcing, training, exercising, and continuously improving our incident response (IR) capabilities.

How you will contribute to revolutionizing electric aviation:

• Own one or more functions of BETA’s Information Security Operations program, support the others
• Triage findings from BETA’s SOC and other sensors, owning resolution where possible and documenting/tracking resolution by others where needed
• Document and track remediation of vulnerabilities and security-relevant misconfigurations, leading periodic reviews with operators of affected assets to guide resolution
• Respond to information security incidents throughout BETA’s information environment as a member of our Incident Response Team (IRT)
• Develop, maintain, and enhance the resources supporting training- and execution of BETA’s Information Security Incident Response Protocol (IRP)
• Train and exercise the IRP with Team Members who will staff the IRT
• Collaborate closely with other Digital Infrastructure staff to maximize alignment between security- and operational incident response
• Contribute reporting to inform periodic (monthly, annual, etc.) enterprise security posture reviews
• Support audits throughout BETA’s information environment by producing required artifacts
• Cross-train with other BETA’s Cybersecurity Analysts and understand their workflows sufficiently to provide coverage in the event of their absence

Minimum Qualifications:

• Strong understanding of information security/cybersecurity first principles
• Professional experience in an information security/cybersecurity role: continuous monitoring or incident response
• Strong teamwork orientation
• Aptitude for organizing information for others to access
• Aptitude for training others
• Excellent written and verbal communication
• Strong sense of initiative

Above and Beyond Qualifications:

• Demonstrated ability to interpret security information for non-practitioners
• Experience developing- and delivering training in a professional setting, both in-person and online
• Experience with risk-based vulnerability management
• Experience with malware analysis and response
• Experience securing IoT/ICS assets
• Experience leading information security/cybersecurity incident response
• Experience developing incident response plans or emergency management plans
• Enthusiasm for training responders through exercises
• Experience collecting data in support of reporting via web services APIs
• Academic degree in information security/cybersecurity, SANS GIAC certification (DFIR track, Cyber Defense track) or equivalent, NIMS Incident Command System certification or similar

Physical Demands and Work Environment:

• This role consists primarily of computer work and presentations to small groups in an office environment

$80,000 - $100,000 a year

Build electric airplanes with us!

We encourage all driven candidates to apply, even if they do not meet every listed qualification.

We are an equal opportunity employer. Employment decisions are based on merit, competence and qualifications and will not be influenced in any manner on race, color, religion, age, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, disability, veteran or military status, genetic information, pregnancy, or any other protected characteristic under federal, state, or local law. BETA complies with all applicable federal, state and local non-discrimination laws and does not tolerate discrimination of any kind in our workplace.

Employment offers are contingent upon the successful completion of a background check. BETA Technologies participates in E-Verify.