Enterprise Hosting Security Lead

Airbus Canada; Waterloo; On-site; CAD 90,000 - 130,000; Full time

Job summary

NAVBLUE, an Airbus Company, is seeking a Team Leader for the Hosting Security Group to oversee security operations and team growth. The role involves defining activities, managing security issues, and leading a team in a dynamic environment focused on cybersecurity and hosting technologies. Candidates should have a strong background in cybersecurity and leadership skills, with a commitment to promoting best practices and compliance.

Benefits

Flexible working arrangements

Diversity and inclusion initiatives

Qualifications

• Over 5 years in cybersecurity with infrastructure/operations focus.
• AWS Security - Specialty certification required.
• Fluent in English; French language skills are a plus.

Responsibilities

• Lead the newly created Enterprise Hosting Security Entity.
• Define and structure activities in coordination with stakeholders.
• Manage a security backlog using Agile methodologies.

Skills

Leadership

Communication

Technical

Teamwork

Scripting/Automation

Education

Academic degree in IT engineering with specialization in Cybersecurity

7-10 years of equivalent experience

Job description

NAVBLUE, an Airbus Company, is opening a new position within its Enterprise Hosting Department. The main objective of this entity is to define, provide, and support the production environments used by all NAVBLUE's customers. It is divided into 4 teams: Hosting Engineering, Hosting Delivery, Hosting Operations, and Hosting Security, supporting all topics related to Solutions Hosting within NAVBLUE. Currently, NAVBLUE solutions are mainly hosted in AWS Cloud using native AWS solutions and VMware on AWS.

We are seeking a Team Leader for the Hosting Security Group to support team growth and new organizational structure.

The position holder will lead the newly created Enterprise Hosting Security Entity, which aims to:

• Reactively and proactively resolve security issues raised by policies, scan results, and other sources for NAVBLUE Products.
• Monitor and resolve hosting-related security issues.

The first responsibility of the Lead is to define and structure activities in coordination with stakeholders.

The role requires deep understanding of cybersecurity, hosting technologies, the ability to organize activities in an industrial environment, lead a team, prioritize tasks, and perform trade-offs daily.

Responsibilities:

• Structure Security Operations activities with stakeholders such as Security Officers, IT, Software Factory/Architects, and Airbus.
• Define group priorities in coordination with stakeholders and report on progress.
• Manage a security backlog using Agile methodologies and oversee grooming and progress.
• Optimize team organization based on context.
• Define and review security practices, processes, and standards.
• Set operational goals for team members annually.
• Manage daily team activities through regular 1:1 meetings.
• Define activity follow-up and reporting methods (dashboards).
• Contribute to contract setup and contractor performance follow-up if activities are contracted.
• Lead group meetings daily/weekly.

Additionally, the Hosting Security Lead will serve as a SecOps Specialist with responsibilities including:

• Security monitoring and coordination with the Security Policy team for actions.
• Configuration management of security items like OS patches.
• Managing security activities such as patches and vulnerability assessments.
• OS patching and maintenance, including setup and configuration.
• Reviewing processes for compliance with security policies.
• Promoting security best practices and providing feedback to policy teams.
• Accelerating enterprise cloud security practices adoption, designing, and implementing compliant cloud solutions.

Qualifications:

Academic degree in IT engineering with specialization in Cybersecurity or 7-10 years of equivalent experience.

Skills & Experience:

• Leadership: ability to organize activities, lead international teams of 5-10 people, prioritize, delegate, and defend standards.
• Communication: excellent internal and external communication skills, proactive, confident self-starter.
• Technical: over 5 years in cybersecurity with infrastructure/operations focus, experience in security monitoring, vulnerability management, scripting/automation skills (asset), AWS Security - Specialty certification required, AWS Cloud Practitioner and Solution Architect - Associate preferred, strong Linux/Windows OS support, solid networking knowledge, root cause analysis skills.
• Other: effective technical communication, teamwork, ability to handle multiple tasks, travel readiness, fluent in English, French language skills are a plus.

This role requires awareness of compliance risks and a commitment to integrity, supporting NAVBLUE's reputation and growth.

Company: NAVBLUE, Inc.

Employment Type: Permanent

Experience Level: Professional

Job Family: Customer Account and Service Management

By submitting your CV or application, you consent to Airbus processing your data for recruitment purposes. Airbus promotes diversity and inclusion and does not ask for monetary exchanges during recruitment. Report impersonation attempts to [e-mail].

At Airbus, flexible working arrangements are supported to foster innovation.