Spécialiste ingénierie en cybersécurité

SOGECLAIR•Montreal, QC

21h

About The Position

In your role, you will contribute to the application of the cybersecurity certification and continuing airworthiness processes in support of all existing and new development platforms at SOGECLAIR. In order to achieve this, you will: Contribute to the definition of aircraft and system level cybersecurity requirements Review and assess suppliers’ system architecture and cybersecurity protection measures Review the aircraft cybersecurity architecture, identify vulnerabilities and evaluate associated risks Support cybersecurity penetration testing on aircraft and on various system rigs and lead snags investigation Lead investigations of cybersecurity incidents and actively participate in the resolution of any deficiencies with suppliers and SOGECLAIR stakeholders Prepare and/or review design compliance reports and assist the Transport Canada Design Authority Delegates at SOGECLAIR with the finding of compliance against applicable regulations Closely collaborate with other SOGECLAIR departments and disciplines (Avionics, RMAS, Completions, AWOR, Customer Support etc.) as required for the completion of the various tasks Participate to SOGECLAIR preliminary and critical system design reviews Update and maintain SOGECLAIR cybersecurity processes in line with regulatory requirements and best industry practices Represent SOGECLAIR in various conferences and industry committees on cybersecurity Contribute to evolution of the CYBR (Aircraft Cybersecurity) domain and its roadmap Mentor less experienced professionals

Requirements

Hold a University engineering degree in Software, Information Technology, Computer Science, Electronics, Aerospace Engineering or equivalent
Minimum of 6 years of experience in a technical engineering field, including a minimum of 2 years in cybersecurity of networks and systems and 2 years in aerospace
General knowledge of computer network architectures, electronics, operating systems and software programming
Familiarity with the activities related to general aircraft system integration and civil aircraft certification
Knowledge of IT and/or Aviation Information Security Management System principles
Working knowledge of aviation cybersecurity standards and guidance (highly desired): ED-201A / DO-391 - Aeronautical Information System Security Framework Guidance, ED-202B / DO-326B - Airworthiness Security Process Specification, ED-203A / DO-356A - Airworthiness Security Methods and Considerations, ED-204A / DO-355A - Information Security Guidance for Continuing Airworthiness, ED-206 / DO-392 - Guidance on Information Security Event Management, CS 25.1319 Equipment, systems and network information protection
Ambitious and have a solid drive for results
Ability to work autonomously, with little supervision
Organized, a team player, self-motivated, customer focused, and able to work under pressure
Demonstrated pro-active, adaptable and flexible nature, takes initiative, innovative and has a strong sense of accountability and integrity
Ability to influence
Strong oral and written English communications skills

Nice To Haves

Working knowledge is highly desired for general aircraft system integration and civil aircraft certification
Functional French communication skills are desired

Responsibilities

Contribute to the definition of aircraft and system level cybersecurity requirements
Review and assess suppliers’ system architecture and cybersecurity protection measures
Review the aircraft cybersecurity architecture, identify vulnerabilities and evaluate associated risks
Support cybersecurity penetration testing on aircraft and on various system rigs and lead snags investigation
Lead investigations of cybersecurity incidents and actively participate in the resolution of any deficiencies with suppliers and SOGECLAIR stakeholders
Prepare and/or review design compliance reports and assist the Transport Canada Design Authority Delegates at SOGECLAIR with the finding of compliance against applicable regulations
Closely collaborate with other SOGECLAIR departments and disciplines (Avionics, RMAS, Completions, AWOR, Customer Support etc.) as required for the completion of the various tasks
Participate to SOGECLAIR preliminary and critical system design reviews
Update and maintain SOGECLAIR cybersecurity processes in line with regulatory requirements and best industry practices
Represent SOGECLAIR in various conferences and industry committees on cybersecurity
Contribute to evolution of the CYBR (Aircraft Cybersecurity) domain and its roadmap
Mentor less experienced professionals