Senior Cybersecurity Analyst

MHIRJ is the merger of two important heritages: Mitsubishi Heavy Industries (MHI) and the CRJ Series program. We provide comprehensive operational, engineering, and customer support solutions, including maintenance, refurbishment, technical publications, marketing, and sales activities for the global regional aircraft industry. We are looking for a Senior Cybersecurity Analyst to join our ranks!

Job Summary

The Senior Cybersecurity Analyst plays a key role in the MHIRJ cybersecurity team, responsible for protecting the company's information systems, data, and networks. This person leads security monitoring and incident response activities, contributes to the improvement of security controls and processes, and acts as a technical and procedural reference for junior analysts and IT teams.

Your contribution as a Senior Cybersecurity Analyst

Security monitoring and incident response

• Ensure leadership in daily security alert monitoring activities (EDR, SIEM, email security, M365 security, etc.).
• Perform in-depth analysis and investigation of security events to distinguish false positives from real incidents.
• Handle medium-to-high severity incidents (phishing, malware, account compromise, data exfiltration, etc.) and coordinate actions with IT teams and stakeholders.
• Document incidents, root causes, and corrective measures, and improve procedures based on lessons learned.

Identity and Access Management

• Provide guidance and oversee the implementation of access controls (principle of least privilege, role-based access, onboarding, transferring, and offboarding).
• Collaborate with IAM and Infrastructure teams to strengthen identity security (MFA, privileged access, conditional access, etc.).
• Review access models and support periodic access recertification exercises for critical systems.

Vulnerability and Patch Management Support

• Analyze vulnerability scan results and contribute to prioritizing patches according to risk and criticality.
• Work closely with Infrastructure, Network, and Applications teams to ensure follow-up of remediation activities and make necessary escalations when deadlines or risks are deemed unacceptable.
• Participate in the continuous improvement of the vulnerability management program (SLAs, reports, dashboards, etc.).

Governance, Compliance, and Security Awareness

• Contribute to the development and maintenance of operational security procedures, standards, and guidelines.
• Participate in or lead the preparation of evidence required for audits, customer security questionnaires, and compliance activities (e.g., controls aligned with ISO 27001 and OEM requirements).
• Provide recommendations and contribute to cybersecurity awareness activities (phishing simulations, targeted training).

Tool Management and Process Improvement

• Act as an expert resource for certain security tools (EDR, Tanium, SIEM, Microsoft 365 security, email security, etc.).
• Participate in the design and implementation of use cases, dashboards, and alerts in SIEM and related platforms.
• Propose and implement improvements to security processes, operational procedures, and automation (scripting, orchestration, integrations).
• Mentor junior analysts on tools, techniques, and best practices.

Here is what is needed to succeed:

Education and Experience

• Bachelor's degree in information technology, computer science, cybersecurity, or equivalent experience.
• Generally 5 or more years of experience in cybersecurity, within a security operations center (SOC), incident response, or infrastructure security within an enterprise environment.

Solid understanding of the following:

• Networks: TCP/IP, VPN, firewalls, proxies, DNS, routing.
• Operating Systems: Windows Server, Windows workstations, and basic Linux knowledge.
• Core Services: Active Directory, Microsoft 365 (M365/O365), virtualization, and basic cloud computing (Azure and/or AWS).
• Hands-on experience with several of the following technologies:
• Workstation security and EDR solutions (e.g., CrowdStrike or equivalent).
• SIEM and log management (use case creation, analysis, and basic tuning).
• Vulnerability and patch management (e.g., Tanium, Qualys).
• Messaging and Microsoft 365 security controls, web filtering, and identity security (MFA, conditional access).

Behavioral Skills

• Excellent analytical and problem-solving skills; ability to explain technical issues in business terms.
• High autonomy and sense of responsibility; ability to drive incidents and initiatives to completion.
• Excellent written and verbal communication skills; ability to collaborate effectively with IT teams and business stakeholders.
• Team spirit and willingness to support the development of junior members.

Assets

• Knowledge of reference frameworks such as ISO 27001, NIST CSF, or SOC 2.
• Scripting and automation skills (PowerShell, Python) to optimize recurring tasks.
• Relevant certifications (e.g., Security+, CySA+, AZ-500, MS-500, SSCP, CISSP, GIAC).
• Experience in aviation, industrial, or operational technology (OT) sectors.
• English is required for the position as the selected person will regularly communicate with colleagues, clients, or partners located outside of Quebec.

If your experience matches the qualifications required for this position, we encourage you to apply - we would love to meet you!

Why join us?

Are you passionate about aviation? Are you eager to make a significant impact on clients? Aspiring to a fulfilling career as a Senior Cybersecurity Analyst, you will have the opportunity to:

• Actively contribute to strengthening cybersecurity in the aviation industry.
• Support and resolve real incidents on various projects and challenges related to the security of cloud and on-premise environments.
• Collaborate with experienced professionals in cybersecurity, infrastructure, and engineering.

At MHIRJ, we recognize and appreciate your contribution to our unified team. We live by our values and embody our behaviors which are the drivers of our success. Take flight with a team that shares your passion and supports you in your journey. Let's fly together at MHIRJ!

We offer comprehensive benefits for you and your family, as well as numerous career advancement opportunities.

• Competitive health, dental, and vision insurance
• Annual leave bank
• Competitive compensation and annual bonus plan
• Retirement savings plans
• Employee discounts and much more!

MHIRJ is an equal opportunity employer and encourages women, Indigenous peoples, persons with disabilities, and members of visible minorities to apply.