Spécialiste principal centre des opérations de cybersécurité-ca

Canadian National Railway; Montreal; Hybride; CAD 90 000 - 118 000; Plein temps

Avantages offerts par ce poste

Annual bonus

ESIP

Pension

Benefits

Résumé du poste

Canadian National Railway (CN) is seeking a senior Network Security Lead to provide technical leadership to the Network Security Management team, improving CN's cyber security posture across all networks and environments. The role acts as SME, guiding integration of security functionality and mentoring teams, with responsibility for assessing new projects and recommending security solutions.

The position requires extensive hands-on experience with NGFW, IDS/IPS, VPNs, and WANs, and offers a

Qualifications

• Minimum 10 years of overall work experience in network security.
• 5+ years hands-on expertise with network security in large corporate environments.
• Advanced NGFW, IDS/IPS, VPN and WAN experience; security tooling knowledge.

Responsabilités

• Lead installations, upgrades and maintenance of network security infrastructure.
• Provide third-level security analysis and incident response support.
• Mentor teams and drive security project execution and documentation.

Connaissances

NGFW

IDS/IPS

DDoS mitigation

VPN

NAC

Threat prevention

URL filtering

DNS security

TCP/IP

Scripting

Formation

Bachelor's Degree in CS/IS

CISSP

CCNP Security

CCIE Security

PCNSA/PCNSE

Outils

NGFW platforms

Log analysis tools

Description du poste

Hiring Salary Range:

$ 89900 - 118000 This range represents the hiring range. Salaries are determined individually depending on skills and experience. You will also be eligible to an annual bonus, employee share investment program (ESIP), Pension, Benefits and other perks. At CN, we are committed to our pursuit of excellence. We take pride in delivering work of the highest standard, continually innovating to shape the railroad of the future. As responsible railroaders, we make the right decisions every time, putting safety first, acting with unwavering integrity, and holding ourselves accountable for our actions. We believe in succeeding together-by fostering inclusivity and collaboration, we sustainably deliver exceptional results for our customers. Join us today and get your career moving!

Job Summary

The incumbent is responsible for providing technical leadership to the Network Security Management team. The role improves and maintains the cyber security posture of CN's networks enabling business functionality across all systems and environments by applying best practices and security solutions. Acting as a Subject Matter Expert (SME), the incumbent oversees development and integration of new network security functionality into CN's networks and collaborates with various relevant teams. The role is accountable for assessing new projects and recommending solutions to surfacing issues. The position provides mentoring and training and acts as a third-level support.

Main Responsibilities

Operation Excellence

• Lead and execute installations, upgrades, configurations and maintenance of the network security infrastructure
• Perform a quality review of infrastructure changes and implementations
• Provide third-level support including detailed threat analysis of log data from security devices
• Lead life cycle project initiatives (analyze, test and deploy)
• Lead problem investigations and follow-up on resolutions
• Perform preventive maintenance tasks
• Monitor and maintain system availability and performance
• Identify Key Performance Indicators (KPIs) related to the capacity, performance of the service and network security
• Oversee gatherings of baseline data and ensure that it is assessed against current data for improvements
• Create and maintain operational documentation such as run books, diagrams and system layout
• Troubleshoot and correct defects with vendors
• Apply and ensure compliance with all appropriate CN Technology standards (Security, Architecture, Project Delivery Methodology, Sarbanes-Oxley Act (SOX))
• Respond to investigations and queries of InfoSec Team and Auditors related to breaches
• Assist with root cause analyses for events and incidents when underlying issues are unknown

Delivery

• Participate in project analysis and planning phase to estimate effort and build activity plan
• Collaborate with project team to deliver required infrastructure
• Participate in project transition and support strategies (T2C)
• Lead network security assigned strategies and projects
• Review and maintain Engineering standards and specification documents
• Create and maintain operational documentation (run books, how-to, diagrams, system layouts, standard operating procedure (SOPs))
• Assist on technical proposals, specifications, requirements and design documents
• Coordinate with internal and external stakeholders and vendors as necessary

Practice Evolution

• Engage with team to define, design, and implement network security solutions to enhance cyber security posture
• Participate in evaluation and recommendation of network security tools and technologies for existing and future business needs
• Collaborate with team members to develop and implement process improvements
• Communicate complex designs and information to peers
• Provide training to multiple teams
• Recognize and act on Operations and Business risks and recommend solutions

Working Conditions

The role has standard working conditions in an office environment with a regular workweek from Monday to Friday and is eligible to participate in CN's hybrid work model. The role involves managing priorities and delivering work within established timelines, with support from the team to ensure sustainable and effective workload management. The position requires minimal travel (5%) to workshops and training.

Experience

Relevant Experience

• Minimum 10 years of overall work experience
• Minimum 5 years of demonstrated experience in providing hands-on technical expertise with network security solutions deployed in large corporate environments
• Advanced experience with Next Generation Firewall (NGFW) technologies and capabilities
• Experience with Wide-Area Networks (WAN) technologies
• Candidates with an equivalent combination of education, training, and experience will be considered

Education/Certification/Designation

• Bachelor's Degree in Computer Science, Information Systems or equivalent
• Certification in Certified Information Systems Security Professional (CISSP), Cisco Certified Network Professional (CCNP) Security, Cisco Certified Internetwork Expert (CCIE) Security, Certified Network Security Administrator (PCNSA), Certified Network Security Engineer (PCNSE) or other security or network security related certification*
• Candidates with equivalent practical experience, education, or training will be considered

* Any requirement marked with (*) will be considered an asset (not mandatory)

Competencies

• We Care About Each Other
• We Strive for Excellence
• We Succeed Together
• We Lead Responsibly
• Compliance
• Build trust
• Reading the environment
• Political acumen
• AI Literacy and data orientation

Technical Skills/Knowledge

• Advanced understanding of core security technologies such as NGFW, Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Distributed Denial-of-Service (DDoS/DoS), Virtual Private Network (VPN), Network Access Control (NAC), Advanced Thread Prevention, Uniform Resource Locator (URL) filtering, Domain Name System (DNS) Security and Remote Access
• Deep understanding of common network and application stack protocols such as Transmission Control Protocol (TCP), Internet Protocol (IP), Internet Control Message Protocol (ICMP), Transport Layer Security (TLS), Hypertext Transfer Protocol Secure (HTTP/HTTPS) and Internet Protocol Security (IPSEC)
• Ability to analyze assembled network data to perform incident response and identify potential security issues
• Knowledge of policies, procedures, and protocols in use by the CN
• Knowledge in analyzing security risks and developing response procedures
• Strong working knowledge and troubleshooting of Border Getaway Protocol (BGP), Open Shortest Path First (OSPF) and Enhanced Interior Gateway Routing Protocol (EIGRP) routing protocols
• In-depth working knowledge and troubleshooting VPN technologies
• Advanced working knowledge and troubleshooting of authentication mechanisms
• Strong understanding of end-point platform such as Windows or Linux
• Knowledge of scripting languages

Additional Information (If Any)

About CN CN is a premium railroad that sustainably generates value for our customers, shareholders, employees, and stakeholders with an unwavering commitment to safety and service. Essential to the economy, to the customers, and to the communities it serves, CN safely transports more than 300 million tons of natural resources, manufactured products, and finished goods throughout North America every year. CN's network connects Canada’s Eastern and Western coasts with the U.S. South through an 18,800-mile rail network. CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN powers the North American economy and is committed to programs supporting social responsibility and environmental stewardship. At CN, we are dedicated to building North America's safest, most inclusive and sustainable railroad, which includes reflecting the communities in which we operate. Research shows that candidates often don't apply unless they feel they fit the job posting at 100%. To all potential applicants, even if you don't meet every job requirement listed in a posting, we still encourage you to apply. If you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations), please get in touch with our team at [e-mail]. As an equal opportunity employer, qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, and other protected status as required by applicable law. Please monitor your email on a regular basis as communication to applicants is done via email