MHIRJ is the merger of two important heritages: Mitsubishi Heavy Industries (MHI) and the CRJ Series program. We provide comprehensive operational, engineering and customer support solutions, including maintenance, refurbishment, technical publications, marketing and sales activities for the global regional aircraft industry. We are looking for a Senior Cybersecurity Analyst to join our ranks!

Role Summary

The Senior Cybersecurity Analyst plays a key role in the MHIRJ cybersecurity team, responsible for protecting the company's information systems, data and networks. This person leads security monitoring and incident response activities, contributes to the improvement of security controls and processes, and acts as a technical and procedural reference for junior analysts and IT teams.

Your contribution as a Senior Cybersecurity Analyst

Security monitoring and incident response

• Provide leadership for daily security alert monitoring activities (EDR, SIEM, email security, M365 security, etc.).
• Perform in-depth analysis and investigation of security events to distinguish false positives from real incidents.
• Handle medium to high severity incidents (phishing, malware, account compromise, data exfiltration, etc.) and coordinate actions with IT teams and stakeholders.
• Document incidents, root causes and corrective measures, and then improve procedures based on lessons learned.

Access and Identity Management

• Provide guidance and oversee the implementation of access controls (principle of least privilege, role-based access, onboarding, transferring and offboarding management).
• Collaborate with IAM and Infrastructure teams to strengthen identity security (MFA, privileged access, conditional access, etc.).
• Review access models and support periodic access recertification exercises for critical systems.

Vulnerability and Patch Management Support

• Analyze vulnerability scan results and contribute to patch prioritization based on risk and criticality.
• Work closely with Infrastructure, Network and Applications teams to ensure follow-up of remediation activities and make necessary escalations when deadlines or risks are deemed unacceptable.
• Participate in the continuous improvement of the vulnerability management program (SLA, reports, dashboards, etc.).

Governance, compliance and security awareness

• Contribute to the development and maintenance of security procedures, standards and operational guides.
• Participate in or lead the preparation of evidence required for audits, customer security questionnaires and compliance activities (e.g., controls aligned with ISO 27001 and OEM manufacturer requirements).
• Provide recommendations and contribute to cybersecurity awareness activities (phishing simulations, targeted training).

Tool management and process improvement

• Act as an expert resource for certain security tools (EDR, Tanium, SIEM, Microsoft 365 security, email security, etc.).
• Participate in the design and implementation of use cases, dashboards and alerts in SIEM and related platforms.
• Propose and implement improvements to security processes, operational procedures and automation (scripts, orchestration, integrations).
• Mentor junior analysts on tools, techniques and best practices.

Here is what is needed to succeed:

Education and experience

• Bachelor's degree in information technology, computer science, cybersecurity or equivalent experience.
• Generally 5 or more years of experience in cybersecurity, within a security operations center (SOC), incident response or infrastructure security within an enterprise environment.

Solid understanding of the following:

• Networks: TCP/IP, VPN, firewalls, proxies, DNS, routing.
• Operating systems: Windows Server, Windows workstations and basic Linux knowledge.
• Core services: Active Directory, Microsoft 365 (M365/O365), basic virtualization and cloud computing (Azure and/or AWS).
• Hands-on experience with several of the following technologies:
• Workstation security and EDR solutions (e.g., CrowdStrike or equivalent).
• SIEM and log management (use case creation, analysis and basic tuning).
• Vulnerability and patch management (e.g., Tanium, Qualys).
• Messaging and Microsoft 365 security controls, Web filtering and identity security (MFA, conditional access).

Behavioral skills

• Excellent analytical and problem-solving skills; ability to explain technical issues in business terms.
• High autonomy and sense of responsibility; ability to drive incidents and initiatives to completion.
• Excellent written and verbal communication skills; ability to collaborate effectively with IT teams and business stakeholders.
• Team spirit and willingness to support the development of junior members.

Assets

• Knowledge of frameworks such as ISO 27001, NIST CSF or SOC 2.
• Scripting and automation skills (PowerShell, Python) to optimize recurring tasks.
• Relevant certifications (e.g., Security+, CySA+, AZ-500, MS-500, SSCP, CISSP, GIAC).
• Experience in aviation, industrial or operational technology (OT) sectors.
• English is required for the position as the selected person will regularly need to communicate with colleagues, clients or partners located outside of Quebec.

If your experience matches the qualifications required for this position, we encourage you to apply - we would love to get to know you!

Why join us?

Are you passionate about aviation? Are you eager to make a significant impact on customers? Aspiring to a fulfilling career as a Senior Cybersecurity Analyst, you will have the opportunity to:

• Actively contribute to strengthening cybersecurity in the aerospace industry.
• Support and resolve real incidents on various projects and challenges related to the security of cloud and on-premise environments.
• Collaborate with experienced professionals in cybersecurity, infrastructure and engineering.

At MHIRJ, we recognize and appreciate your contribution to our unified team. We live by our values and embody our behaviors that drive our success. Take flight with a team that shares your passion and supports you in your journey. Let's take flight together at MHIRJ!

We offer comprehensive benefits for you and your family, as well as numerous career growth opportunities.

• Competitive health, dental and vision insurance
• Annual leave bank
• Competitive compensation and annual bonus plan
• Retirement savings plans
• Employee discounts and much more!