Principal Security Engineer leading cyber security efforts and providing technical direction at Intact. Focusing on risk mitigation and mentoring security teams in a hybrid environment.
Responsibilities
Provide technology direction on the architecture and design of security-related technology initiatives.
Serve as a trusted advisor to security specialists, leveraging expertise to ensure high judgement decisions are made on complex and ambiguous security problems across all security domains, either by acting as decision-maker or by helping other specialists with the decision-making process.
Act as a force multiplier: Leverage your extensive expertise to enhance the effectiveness and efficiency of the entire engineering team.
Foster a culture of innovation and excellence by mentoring colleagues, enhancing mechanisms, introducing best practices, and driving architectural improvements that enable the team to implement strong security risk mitigations.
Promote cross-team collaboration and drive technical direction across teams, functions, and products, ensuring decisions support overall business, technology and security strategy.
Collaborate closely with senior leadership and principals to develop and implement strategic initiatives that contribute to a durable and resilient security control environment.
Continually identify opportunities for improvement and act as an agent of change by championing innovative ideas and initiatives to improve mechanisms.
Monitor and assess the impact of industry trends, emerging technologies, and changes in threat actor tactics and techniques; recommend strategies to evolve security countermeasures in response.
Serve as an active member of the tech community and promote technology within and outside the organization as a thought leader and contributing to advance IFC’s interests.
Requirements
Bachelor’s or master’s degree in computer science, Engineering or related field.
10+ years of experience in cyber security and/or software development, with at least 3+ years in technical leadership role.
Deep expertise in multiple cyber security domains, including application security, data security, endpoint security, network security, identity and access management, detection engineering, threat intelligence, incident response, and third-party risk management.
Strong understanding of software architecture principles and modern system design patterns.
Strong understanding of cloud service provider platforms and strategies for securing cloud-based technology assets.
Proven ability to design and operate scalable, resilient systems in production environments.
Excellent problem-solving skills and the ability to navigate ambiguity.
Excellent communication and stakeholder management skills to bridge the gap between cyber security teams and business leaders.
Proven leadership in mentoring security specialists and building technical communities.
For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.
No Canadian work experience required however must be eligible to work in Canada.
Benefits
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Stagiaire assistant communication chez Liebherr - Aerospace pour le déploiement du système de management de la sécurité aérienne. Activités variées en communication et mise à jour de formation.
Cybersecurity intern supporting Desjardins Group with risk analysis and security practices. Collaborating on projects to ensure compliance with security measures while developing practical governance strategies.
Product Marketing Manager for Upwind Security, creating compelling narratives in cloud security. Collaborating with various teams to translate complex ideas into clear technical content.
CYE seeks Junior Cybersecurity Architect focusing on governance, risk analysis, and security processes. Work with security leaders, engineering teams, and customers to develop mitigation plans.
Senior leader responsible for designing and executing a corporate security program while collaborating with cybersecurity, IT and risk teams at LPL Financial.
Lead Information Security Engineer managing inbound web application security to protect enterprise web assets at Wells Fargo. Design and implement security measures against application - layer attacks.
Operational Network and Security Manager overseeing technical teams and network security for a major client in Rennes. Engaging in tasks like project management and supplier coordination.
EU Project Manager blending project management and information security for EU - funded cybersecurity projects in Greece. Responsible for compliance, risk assessment, and stakeholder communication.
Personnel Security Specialist at PSI reviewing investigative documentation for federal and contractor employees. Ensuring security and compliance with federal guidelines in background investigations and data management.
FBI Personnel Security Specialist conducting security investigations and risk analysis for national security. Overseeing security program functions and managing personnel as needed.