{"id":3059363,"url":"https://alion.io/job/thales-group-cyber-security-specialist","title":"Cyber Security Specialist","company":{"id":143,"name":"Thales Group","domain":"thalesgroup.com","url":"https://alion.io/company/thales","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":119,"ghost_share":0,"stale_share":0.647,"repost_share":0.017,"time_to_fill_p50_days":50,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fredericton, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":140000,"currency":"CAD","period":"year","gross":null,"usd_annual":99524},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"GitHub","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-23T04:49:29Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Location: Fredericton - Knowledge Park, CanadaIn fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.Ottawa, ON. (CAN.), Hybrid\nPosition Summary\nThales has a vacancy for a Cyber Security Specialist (Detection Engineer) is responsible for the prevention of Cybersecurity incidents by real-time monitoring, detection, and analysis of potential intrusions. This includes using troubleshooting tools to analyze and respond to cyber threats, writing scripts to aid in quick analysis and response, and responding to security events. The position operates and tunes security tools, provides requirements for new security capabilities and creates use cases for monitoring.\nRegulatory Compliance Requirement\nThis position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List and/or the US the Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access.\nKey Areas of Responsibility\nAs a Cyber Security Specialist (Intermediate), you will operate independently across cloud security operations and DevSecOps, working alongside the CSOC and DevOps teams to detect, investigate, and remediate security risks in a Microsoft Azure environment. You will contribute to measurable improvements in detection coverage, vulnerability remediation, detection engineering, pipeline security, and compliance posture.\nSecurity Monitoring & Incident Response\nMonitor and triage alerts from Microsoft Defender for Cloud and Microsoft Sentinel, working in partnership with the CSOC.\nInvestigate suspicious activity and security incidents, perform root cause analysis, and escalate to senior staff or engineering partners when required.\nMaintain accurate incident tracking and documentation throughout the investigation and remediation lifecycle.\nVulnerability & Configuration Management\nConduct and review vulnerability scan results and platform security recommendations, prioritizing remediation by risk.\nValidate Azure resource configurations (e.g., NSGs, Key Vault, Storage) against hardening standards and best practices.\nCoordinate remediation efforts with DevOps teams and track items through to closure.\nIdentity & Access Management\nReview Azure AD (Entra ID) roles and enforce least-privilege access.\nMonitor Privileged Identity Management (PIM) activity and audit service principals and managed identities.\nVerify MFA and conditional access compliance across the environment.\nCompliance & Governance\nSupport alignment with applicable security frameworks and internal policies (e.g., CPCSC, ISO 27001, NIST 800, ITSG).\nReview Azure Policy and compliance scores, and flag deviations for remediation.\nSupport audit requests and maintain accurate supporting documentation and evidence.\nSecurity Automation\nDevelop automation for recurring security checks and remediation tasks.\nEnhance monitoring, detection, and alerting processes over time.\nDashboards Creation / Update\nDetection rules Creation / Regular review / Update\nQA\nLog Parsing\nPreparation and participation to steering committee\nAdmin of QRadar\nMonitoring of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)\nCompliance of the SIEM and surrounding environment (firewall, proxy, jump servers, etc.)\nSecurity best practices application\nIncident response / Crisis management\nMinimum Qualifications\nEducation\nBachelor’s degree in computer science, Computer/Software Engineering, Information Security, or a related technical discipline; or an equivalent combination of post-secondary education and relevant hands-on experience.\nExperience\n3-5 years of hands-on experience in cloud security, security operations, detection engineering, or incident response\nDemonstrated experience working independently on day-to-day security operations, with the judgment to recognize when to escalate complex or high-impact decisions.\nExperience working within a structured incident response process and collaborating with a SOC/CSOC.\nTechnical / Specialized Skills\nHands-on experience with Microsoft Azure security tooling, specifically Microsoft Defender for Cloud and Microsoft Sentinel (alert triage, investigation, and detection tuning).\nExperience with Azure cloud security configuration and hardening (NSGs, Key Vault, Storage, Azure Policy, compliance scoring).\nExperience with IBM QRadar, and Palo Alto XSOAR.\nExperience securing CI/CD pipelines in Azure DevOps and/or GitHub, including SAST, dependency, and container image scanning.\nWorking knowledge of Azure AD (Entra ID) identity and access management - RBAC, least privilege, PIM, service principals, managed identities, MFA, and conditional access.\nExperience writing and tuning detections using query languages (e.g., KQL).\nScripting and automation experience (e.g., PowerShell, Python) to support security checks, and remediation.\nFamiliarity with vulnerability management concepts and security hardening baselines.\nWorking knowledge of common attacker tactics, techniques, and procedures (e.g., MITRE ATT&CK).\nEligibility / Clearance\nMust be eligible to obtain and maintain the security clearance required for the role, and to meet Controlled Goods Program and applicable export-control requirements.\nPreferred Qualifications\nCertifications that cover the principles of Cybersecurity such as the GSEC, Security+, or CISSP\nAdvanced or specialized certifications such as:SC-200\nGIAC GCFA/GCIH/GCIA\nOffsec OSCP\n\nPay Transparency\nThe anticipated Total Target Compensation (TTC), inclusive of annual salary and bonus eligibility, for this role is $120,000 to 140,000 CAD Annual. The Company reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s status protected by local, provincial, and federal laws.\nAI\nWe use artificial intelligence-enabled tools as part of our recruitment process to support activities such as candidate discovery, résumé matching, and interview scheduling. These tools may help screen and assess applications and recommend potential matches based on the requirements within the job description. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters. Artificial intelligence does not make hiring decisions on our behalf.\nWhat We Offer\nThales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:\nCompany paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.\nRetirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.\nCompany paid holidays, vacation days, and paid sick leave.\nVoluntary Life, AD&D, Critical Illness, Long-Term Disability.\nEmployee Discounts on home, auto, and gym membership.\nWhy Join Us?\nSay HI and learn more about working at Thales click here.\nThales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:\nCompany paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.\nRetirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.\nCompany paid holidays, vacation days, and paid sick leave.\nVoluntary Life, AD&D, Critical Illness, Long-Term Disability.\nEmployee Discounts on home, auto, and gym membership.\nThales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.\nThis position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR) and/or the US Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access including eligibility to the Canadian Controlled Goods Program and able to obtain a Canadian Enhanced Reliability security clearance.","description_format":"text","description_chars":9032,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Gym membership","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Satellite Manufacturing","Electronic Warfare","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-22T05:41:16Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.595,"p_room":1,"age_days":9,"expected_fill_days":50,"reasons":["conf:0","stale_co","win:early","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":99524,"is_top_pay":false},"html_url":"https://alion.io/job/thales-group-cyber-security-specialist","json_url":"https://alion.io/job/thales-group-cyber-security-specialist.json","meta":{"generated_at":"2026-10-23T05:10:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8519,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":143},"rest":"https://alion.io/mcp/rest/get_company?id=143"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthales-group-cyber-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthales-group-cyber-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthales-group-cyber-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thales-group-cyber-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthales-group-cyber-security-specialist"}]}