Cyber Security Specialist

Location: Fredericton - Knowledge Park, CanadaIn fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.

Fredericton, N.B., (CAN.), Hybrid

Position Summary

Thales has a vacancy for a Cyber Security Specialist (Detection Engineer) who will be responsible for the prevention of Cybersecurity incidents by real-time monitoring, detection, and analysis of potential intrusions. This includes using troubleshooting tools to analyze and respond to cyber threats, writing scripts to aid in quick analysis and response, and responding to security events. The position operates and tunes security tools, provides requirements for new security capabilities and creates use cases for monitoring.

Regulatory Compliance Requirement

This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List and/or the US the Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access.

Key Areas of Responsibility

An advanced analyst that can help with investigations and incident response on IBM QRadar and Microsoft Sentinel. An admin knowledgeable on detection content creation and QRadar platform administration.

• Develop and maintain security automation for recurring monitoring, security checks, incident response, and remediation activities.
• Continuously improve security monitoring, detection capabilities, alerting processes, and operational efficiency.
• Design, develop, and maintain security dashboards to support operational monitoring, threat detection, and reporting.
• Create, review, tune, and maintain SIEM detection rules to improve threat visibility, reduce false positives, and address emerging threats.
• Perform quality assurance (QA) and testing security configurations, detection rules, automation, and monitoring capabilities.
• Develop and maintain log parsing, normalization, and integration processes to ensure accurate security event collection and analysis.
• Administer, configure, maintain, and optimize IBM QRadar SIEM, including platform health, performance, integrations, and operational support.
• Prepare operational reports, security metrics, and status updates, and participate in steering committee meetings to communicate progress, risks, and priorities.

Minimum Qualifications

Education

• Bachelor’s degree in computer science, Computer/Software Engineering, Information Security, or a related technical discipline; or an equivalent combination of post-secondary education and relevant hands-on experience.

Experience

• 3–5 years of hands-on experience in cloud security, security operations, detection engineering, or incident response
• Demonstrated experience working independently on day-to-day security operations, with the judgment to recognize when to escalate complex or high-impact decisions.
• Experience working within a structured incident response process and collaborating with a SOC/CSOC.

Skillset

• Hands-on experience with IBM QRadar and Microsoft Sentinel security tooling, specifically Microsoft Defender for Cloud and Microsoft Sentinel (alert triage, investigation, and detection tuning).
• Experience writing and tuning detections using query and scripting languages.
• Familiarity with vulnerability management concepts and security hardening baselines.
• Working knowledge of common attacker tactics, techniques, and procedures (e.g., MITRE ATT&CK).
• Ability to investigate complex security incidents and identify root causes.
• Ability to communicate technical findings, risks, and recommendations to technical and non-technical stakeholders.
• Ability to work independently, prioritize investigations, and make risk-based decisions.
• Ability to troubleshoot security tools and identify gaps in detection and monitoring.

Eligibility / Clearance

• Must be eligible to obtain and maintain the security clearance required for the role, and to meet Controlled Goods Program and applicable export-control requirements.

Preferred Qualifications

• Certifications that cover the principles of Cybersecurity such as the GSEC, Security+, or CISSP
• Advanced or specialized certifications such as:
  • SC-200
  • GIAC GCFA/GCIH/GCIA
  • Offsec OSCP

Pay Transparency

The anticipated Total Target Compensation (TTC), inclusive of annual salary and bonus eligibility, for this role is $110,000 to 140,000 CAD Annual​. The Company reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s status protected by local, provincial, and federal laws.

AI

We use artificial intelligence–enabled tools as part of our recruitment process to support activities such as candidate discovery, résumé matching, and interview scheduling. These tools may help screen and assess applications and recommend potential matches based on the requirements within the job description. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters. Artificial intelligence does not make hiring decisions on our behalf.

What We Offer

Thales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:

Company paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.

Retirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.

Company paid holidays, vacation days, and paid sick leave.

Voluntary Life, AD&D, Critical Illness, Long-Term Disability.

Employee Discounts on home, auto, and gym membership.

Why Join Us?

Say HI and learn more about working at Thales click here.

#LI-hybrid

#LI-PD1

Thales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:

• Company paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and Well-Being program.

• Retirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.

• Company paid holidays, vacation days, and paid sick leave.

• Voluntary Life, AD&D, Critical Illness, Long-Term Disability.

• Employee Discounts on home, auto, and gym membership.

Thales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.

This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR) and/or the US Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access including eligibility to the Canadian Controlled Goods Program and able to obtain a Canadian Enhanced Reliability security clearance.