Cybersecurity Consultant

Maarut • Montréal-Est, QC

31d

About The Position

Cybersecurity Consultant

Experience with embedded systems (aerospace or automotive)
Knowledge of embedded security architecture principles (practical or theoretical)
Understanding of telecom protocols/standards (a strong asset)
Strong ability to analyze architectures and identify potential threats
Experience as a System Architect (a strong plus)
Minimum 3 years of experience in risk analysis (probability, impact, risk evaluation)
Experience with penetration testing (especially white box and gray box)
Ability to perform vulnerability analysis of COTS using sources like NIST, Mandiant
Experience in a SOC (nice to have)
Strong report-writing skills for risk assessments
Excellent English (spoken and written)
Excellent French (spoken and written)
Strong interpersonal skills (stakeholder management, influencing, collaboration)
Must be Canadian, American, or European (export control requirement)
Work is deliverables-based (not full-day timezone overlap required, but must attend meetings during French business hours)
Initial workload: ~25–33%, potentially ramping up to full-time by year-end

Requirements

• Experience with embedded systems (aeronautics or automotive sectors).
• Knowledge of secure embedded architecture principles (ideally gained through practical experience, though theoretical knowledge acquired during engineering studies, for example, may suffice) — note: this refers to embedded architecture, not IT system architecture.
• Strong analytical skills regarding system architectures to identify potential threats.
• A minimum of 3 years of experience in risk analysis (calculating probability and impact, and performing risk assessments) — note: while the specific methodology used here is internal to Airbus, experience with other generic methodologies—such as EBIOS or similar frameworks—would be highly valued.
• Experience with penetration testing is a strong asset (particularly white-box and gray-box testing).
• Proficiency in analyzing COTS (Commercial Off-the-Shelf) vulnerabilities (utilizing databases such as NIST or Mandiant) and assessing their impact on the systems in which they are embedded.
• Excellent report-writing skills for risk assessments, including the ability to use precise phrasing when evaluating specific risks.
• Excellent command of English (both spoken and written).
• Excellent command of French (both spoken and written).
• Excellent interpersonal skills, as the role involves frequent meetings and the need to reach compromises with various stakeholders—such as external system suppliers, design offices, and subject matter experts—whom you must effectively sensitize to the importance of cybersecurity and guide toward accepting the constraints imposed by security regulations.
• Canadian, American, or European citizenship is required (due to export control regulations governing access to data from Airbus system suppliers).

Nice To Haves

• Knowledge of specific telecommunication protocols or standards is a significant asset.
• Experience as a System Architect would be a major advantage.
• Experience working within a SOC (Security Operations Center) is a plus.

What This Job Offers

• Career Level: Mid Level
• Education Level: No Education Listed