{"id":167488,"url":"https://alion.io/job/thales-group-cybersecurity-vulnerability-engineer","title":"Cybersecurity Vulnerability Engineer","company":{"id":143,"name":"Thales Group","domain":"thalesgroup.com","url":"https://alion.io/company/thales","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":225,"ghost_share":0.018,"stale_share":0.831,"repost_share":0.018,"time_to_fill_p50_days":48,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Ottawa, Canada"],"countries":["CA"],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":{"min":123459,"max":172842,"currency":"CAD","period":"year","gross":null,"usd_annual":124359},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Windows","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-08-03T00:00:00Z","employer_posted_date":"2026-08-03","last_verified_at":"2026-10-24T17:33:25Z","board_verified":false,"closed_at":null,"days_open":85,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":85},"description":"Location: Ottawa, CanadaIn fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.For decades, Ottawa has been a global technology leader. Today, Canada’s capital holds one of the brightest and most diverse technological ecosystems in North America. Voted as Canada’s best place to live 2017 by Maclean's, Ottawa offers a low cost of living with a high quality of life. The Thales Ottawa office has been a major supplier and long-term trusted partner to DND, enabling the Canadian Armed Forces and the Canadian Coast Guard to achieve mission success.This is a remote and localized role in Ottawa, ON.\nPosition Summary\nCyberattacks have been on the rise around the globe, with hackers and other criminals targeting businesses large and small to steal valuable information or bring computer networks to a halt. Cyber Security analysts are valued for their ability to protect an organization’s information and systems from such attacks.\nThis position is responsible for providing ongoing information security services to all aspects of the on premise and cloud corporate IT environments. The Cybersecurity Vulnerability Engineer will require working across several security functions and have a strong primary focus on incident response activities.\nKey Areas of Responsibility\nMust be able to monitor and evaluate newly disclosed and emerging vulnerabilities from Thales CTI, OSINT, Thales CERT, PSIRT, vendor advisories, security researchers, vulnerability databases, and other trusted sources.\nMust be able to Initiate and coordinate enterprise vulnerability-response activities for vulnerabilities with potential impact to Thales businesses and networks.\nMust be able to Engage infrastructure, IT, application, cloud, product, and security teams to validate exposure and determine required actions.\nMust have working knowledge of threat actor tactics and techniques.\nMust be able to establish clear ownership, priorities, response timelines, and escalation paths.\nMust be able to track remediation and mitigation activities through completion and validate that identified risk has been appropriately addressed.\nMust be able to escalate missed timelines, unresolved ownership, significant technical uncertainty, or material residual risk to appropriate leadership.\nMust be able to maintain clear status reporting for technical teams, cybersecurity leadership, and other stakeholders.\nMust be able to analyze newly disclosed vulnerabilities to understand affected components, exploitation prerequisites, attack vectors, required privileges, exploitability, potential impact, and available mitigations.\nMust be able to review CVEs, vendor advisories, security-research publications, proof-of-concept information, exploit intelligence, and relevant technical documentation.\nMust be able assess whether vulnerable technologies or configurations are present in the enterprise and partner with technology owners to validate actual exposure.\nResponsible for translating complex vulnerability information into clear, actionable guidance for infrastructure, application, product-development, and leadership teams.\nResponsible for partnering with detection and incident-response teams when a vulnerability requires investigation for possible prior exploitation or additional monitoring.\nBasic Qualifications\nBachelor’s degree in computer information systems, programming, engineering or a related field with a minimum of 5+ years of cybersecurity experience, including at least 3-4 years in vulnerability management, vulnerability analysis, security engineering, incident response, threat intelligence, penetration testing, or a closely related technical security function.\n5 to 7 years of experience in Cybersecurity domains.\n3 to 5 years of experience in demonstrated experience analyzing CVEs and determining their relevance and actual impact within complex enterprise environments.\nStrong understanding of vulnerability exploitation, attack paths, operating systems, enterprise applications, networking, authentication, privilege boundaries, and common security controls.\nAbility to interpret vendor advisories, technical security research, proof-of-concept information, logs, configurations, and vulnerability evidence.\nWorking knowledge of Windows and Linux environments, network infrastructure, cloud technologies, virtualization, containers, and enterprise applications.\nAbility to independently coordinate urgent, cross-functional technical response activities involving multiple teams and competing priorities.\nStrong organizational skills and the ability to track multiple concurrent vulnerability-response activities through closure.\nPreferred Qualifications\nStrong knowledge of all aspects of information security within the Prevent, Detect and Respond domains.\nMust be highly analytical and detail-oriented, with organizational skills to manage assigned work to completion.\nExperience supporting large, complex, or globally distributed enterprise environments.\nExperience working across corporate IT, shared infrastructure, software-development, cloud, and product environments.\nExperience using scripting or automation with Python, PowerShell, APIs, SQL, or similar technologies to support vulnerability analysis and data correlation.\nPhysical Demands\nTypical Office environment\nSpecial Position Requirements\nSchedule: First Shift Monday through Friday; Core Business Hours Monday-Friday, etc.\nRegulatory Compliance Requirements\nCanada\nAccess to Trade Controlled Hardware, Software, Technical Information, Controlled Goods Program Clearance & Secret Security Clearance\nWhat We Offer\nThales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:\n\nCompany paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.\n\nRetirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.\n\nCompany paid holidays, vacation days, and paid sick leave.\n\nVoluntary Life, AD&D, Critical Illness, Long-Term Disability.\n\nEmployee Discounts on home, auto, and gym membership.\n\nWhy Join Us?\nSay HI and learn more about working at Thales click here.\nThe reference Total Target Compensation(TTC) market range for this position, inclusive of annual base salary and the variable compensation target, is between Total Target Cash 123,459.00 - 172,842.60 CAD Annual.\nThis reflects how companies in a similar industry and geographic region generally pay for similar jobs. This range helps the Company make pay decisions as one data point among many. Where a position falls within this range is also dependent on other factors including - but not limited to - the employee’s career path history, competencies, skills and performance, as well as the company’s annual salary budget, the customer’s program requirements, and the company’s internal equity. Thales may offer additional benefits and other compensation, depending on circumstances not related to an applicant’s status protected by local, state, or federal law.\nWe use artificial intelligence-enabled tools as part of our recruitment process to support activities such as candidate discovery, résumé matching, and interview scheduling. These tools may help screen and assess applications and recommend potential matches based on the requirements within the job description. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters. Artificial intelligence does not make hiring decisions on our behalf.\n#LI-Remote\n#LI-WM1\nThales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:\nCompany paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.\nRetirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.\nCompany paid holidays, vacation days, and paid sick leave.\nVoluntary Life, AD&D, Critical Illness, Long-Term Disability.\nEmployee Discounts on home, auto, and gym membership.\nThales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.\nThis position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR) and/or the US Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access including eligibility to the Canadian Controlled Goods Program and able to obtain a Canadian NATO Secret clearance.","description_format":"text","description_chars":9593,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Gym membership","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Satellite Manufacturing","Electronic Warfare"],"lifecycle":[{"event":"open","at":"2026-08-03T00:00:00Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":0.9,"p_active":0.39,"p_room":0.36,"age_days":85,"expected_fill_days":48,"reasons":["conf:60","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":124359,"is_top_pay":false},"html_url":"https://alion.io/job/thales-group-cybersecurity-vulnerability-engineer","json_url":"https://alion.io/job/thales-group-cybersecurity-vulnerability-engineer.json","meta":{"generated_at":"2026-10-27T05:56:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5827,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":143},"rest":"https://alion.io/mcp/rest/get_company?id=143"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthales-group-cybersecurity-vulnerability-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthales-group-cybersecurity-vulnerability-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthales-group-cybersecurity-vulnerability-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thales-group-cybersecurity-vulnerability-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthales-group-cybersecurity-vulnerability-engineer"}]}