Cloud Cybersecurity Specialist

BRP•Montreal, QC

6d•Hybrid

About The Position

The CYBER SECURITY Specialist is responsible for managing processes and technologies to defend and protect BRP’s systems and information assets against cyber-attack and adversaries. This critical role requires a detailed understanding of cyber security and in-depth knowledge of Endpoint, Networking, Cloud technologies and Identity; especially in the context CSPM (cloud security posture management) of logging pipelines, observability, and detection engineering know-how to protect such assets in preparation for increasing complexity and emerging threats. Your main tasks will be detection mechanisms that provide comprehensive coverage of know CLOUD SECURITY threats but also build custom CLOUD ASSETS based detections to tackle new threats.

Requirements

Excellent Azure Security, Microsoft CSPM, GCP skillset with hands-on experience.
Hands-on experience with CSPM, CWP, CIEM, and CNAPP tools.
Experience with PKI
Experience with Modern Authentication Technologies such as OAuth2, OpenID Connect and SAML 2.0
Experience with infrastructure as code tools, such as Hashicorp Terraform.
Experience with CI/CD pipelines (re: automation).
Good understanding of Identity (IAM/PAM) in the context of Cloud Security as well as on prem assets (AD, Entra ID)
Bachelor’s degree in information technology, security, or similar computer-related field of study and 5+ years of information security experience
Experience of Cloud security services/tools deployment and orchestration technologies
In-depth familiarity with workflow tools and ability to develop and improve tools/processes
Solid knowledge of incident response methodologies, best practices and routines
Skilled at identifying various types of events and incidents and applying the right response framework for each (i.e. information mishandling, security vulnerability, system exploit, malware infection, etc.)
Medium to advanced understanding of IOC’s, Cyber Kill Chain, MITRE ATT&CK and preventive and detective technical controls.

Nice To Haves

AWS experience is an asset.
Certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer. Any of GIAC range of certs

Responsibilities

Drive and lead deployment, ongoing orchestration and operationalization of cyber security services and products to drive implementation of new Threat Detection Controls within the framework of a threat-informed defense strategy for CLOUD ASSETS with main focus on Azure and GCP.
Lead the design and execution of the enterprise security operations processes, procedures, and playbooks as it pertains to CSPM, CWPP, Containers.
Manage and monitor cloud resource entitlements to reduce access risks.
Manage and monitor cyber tooling output and conduct spot checks for accuracy.
Manage and monitor cloud configurations to ensure compliance with security best practices (e.g., AWS, Azure, Google Cloud).
Manage detection engineering security operations projects, including process improvement and technology investment in the CLOUD.
Conduct research within the fields of Security Observability, Vulnerability, Cloud and Container security to develop new strategies and execute deliveries to protect against threats.
Manage technical aspects of BRP’s cyber technology providers in order to make sure BRP Cyber tech stack is providing all the necessary detective protections.
Stay current with industry trends, emerging threats, and new technologies to ensure the effectiveness of the detection and response capabilities.
Respond to monitoring alerts according to defined playbooks and procedures.
Implement least-privilege access policies and ensure compliance with identity and access management (IAM) standards.
Detect and remediate any identity anomalies in cloud environments.
Implement automated tools to maintain a robust security posture.