Advising and supervising all aspects related to security, with a focus on new infrastructures (classified and non-classified).
Supporting the design and architecture of systems, from conceptual to operational phase, in close collaboration with external vendors (notably with Nutanix).
Setup and maintenance of Splunk.
Supporting the setup and maintenance of a new AWS cloud infrastructure for developers, including data migration from Bitbucket to GitHub, with automation of security testing (DAST and SAST).
Assisting application developers on data anonymization processes to ensure sensitive data can be securely moved to AWS.
Requirements
Hold a Master's degree in a relevant field and 10+ years of experience.
Possessing relevant security certifications (e.g., CISSP, CISM, AWS Certified Security – Specialty, CompTIA Security+) are a strong asset.
Strong understanding of IT security principles, standards, and best practices, especially in infrastructure security (both classified and non-classified environments).
Experience advising on and supervising security for critical infrastructures, ideally in public institutions.
Expertise in system design and architecture, from conceptual planning to operational deployment, including risk assessments and threat modeling.
Solid experience with Splunk deployment, configuration, and maintenance (log aggregation, monitoring, security analytics).
Strong knowledge of cloud security, especially with Amazon Web Services (AWS), including designing and setting up secure AWS environments; implementing security controls and identity/access management; data migration to the cloud.
Familiarity with version control platforms and migrations, particularly Bitbucket to GitHub.
Experience with automation of security testing, including Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools and pipelines.
Knowledge of data anonymization techniques and their application in secure data transfer/migration processes.
Excellent problem-solving, communication, and documentation skills.
Proficiency in English language at a C1/C2 level.
Proficiency in French language is considered an asset.