Security Operations Administrator

Latecoere Aerostructures Canada; Delta; On-site; CAD 140,000 - 167,000; Full time

Job summary

Latecoere Aerostructure Canada (Avcorp Industries Inc.) is seeking a Security Operations Administrator to support CMMC 2.0 Level 2 compliance in a DoD environment. The role focuses on operational cybersecurity controls and documentation.

The ideal candidate has 4+ years in IT or cybersecurity, familiarity with SOC, EDR, SIEM, and ability to coordinate remediation alongside IT and security teams.

Qualifications

• 4+ years in IT or cybersecurity, such as SOC, system administration, or security operations roles.
• Exposure to CMMC, NIST SP 800-171, or similar frameworks is a plus.

Responsibilities

• CMMC Level 2 operational support and documentation upkeep (SSP/POA&M).
• Operate and monitor EDR, SIEM, and IAM tools; investigate alerts.
• Lead vulnerability tracking, remediation follow-up, and incident coordination.
• Maintain up-to-date security documentation and evidence for audits.
• Collaborate with IT, infrastructure and Group security teams; support new systems securely.

Skills

Cybersecurity experience

SOC experience

System administration

Security operations

Education

Degree in Cybersecurity or Information Technology or equivalent

Job description

JOB TITLE: Security Operations Administrator

FAMILY: Information Technology

II. ROLE

Latecoere Aerostructure Canada (Avcorp Industries Inc.) operates in a U.S. Department of Defense (DoD) environment and handles Controlled Unclassified Information (CUI). To support compliance with Cybersecurity Maturity Model Certification (CMMC) 2.0 Level 2, the company is strengthening its operational cybersecurity capabilities.

The expected salary range for this position is $100,000–$120,000 per year. Placement within the range will be determined based on the successful candidate’s qualifications, experience, and other job-related factors.

III. MISSIONS AND RESPONSIBILITIES

1. CMMC OPERATIONAL SUPPORT

• Support the day-to-day execution of CMMC Level 2 controls.
• Maintain compliance documentation, including the System Security Plan (SSP), Plan of Action and Milestones (POA&M), and supporting evidence.
• Track remediation actions and security improvements.
• Ensure systems handling CUI follow defined security standards.

2. CYBERSECURITY OPERATIONS

• Operate and monitor endpoint detection and response (EDR), security information and event management (SIEM), and identity and access control tools.
• Investigate security alerts and elevate issues when required.
• Support system hardening and secure configurations.
• Work with IT teams to resolve security issues.

3. INCIDENT AND VULNERABILITY HANDLING

• Participate in incident detection, analysis, and response, and coordinate security incidents involving CUI.
• Ensure incidents are documented, reported, and investigated in accordance with company policy.
• Manage vulnerability identification, tracking, remediation follow-up, and closure.

4. DOCUMENTATION AND AUDIT READINESS

• Keep security documentation current and aligned with actual systems, configurations, and operating practices.
• Collect and maintain audit evidence, including logs, screenshots, and configuration records.
• Support internal and external audits.

5. COLLABORATION

• Work closely with IT, infrastructure, and Group security teams.
• Support the secure implementation of new systems and changes.
• Contribute to security awareness activities.

IV. SAFETY, COMPLIANCE & GOVERNANCE

• Protect CUI and other sensitive information in accordance with approved security policies and access controls.
• Follow applicable company safety, environmental, and governance requirements, and report hazards or security control gaps to the appropriate lead.
• Timeliness of security alert investigation, incident documentation, and escalation against agreed response expectations.
• Completion of assigned vulnerability remediation and compliance actions by agreed due dates.
• Accuracy, completeness, and currency of security documentation and audit evidence.

VI. AUTHORITY

• Administer assigned security tools and controls within approved access permissions and procedures.
• Collect security evidence and coordinate remediation follow-up with responsible teams.
• Escalate incidents, control gaps, and changes requiring approval to the appropriate IT or Group security lead.

VII. DECISION MAKING RESPONSIBILITIES

• Triage alerts and prioritize routine follow-up using defined severity criteria and procedures.
• Determine when findings or proposed changes require escalation and follow approved incident and change procedures.

VIII. REQUIREMENTS

• Education: Degree in Cybersecurity, Information Technology, or equivalent.
• Experience: 4 or more years in IT or cybersecurity, such as security operations centre (SOC), system administration, or security operations roles.
• Initial exposure to CMMC, NIST SP 800-171, or similar frameworks is an asset.

IX. GENERAL RESPONSIBILITIES

• Comply with company policies, Code of Conduct, Safety and Environmental policies.
• Follow all safety requirements as explained during the onboarding
• Promote ethical behavior and customer focus.
• Support a collaborative, high-performance culture.