Key Responsibilities:

The senior security architect and lead will have ultimate accountability and ownership for information security as it relates to Humanetics' digital business. Humanetics, is looking for a cyber security lead who is both strategic and hands-on. You will be responsible for the analysis, design, architecture and processes associated to critical software solutions across various geographic locations for on-premise and cloud.

This role requires a balance between strategic mindset and ability to ‘roll up your sleeves’.

Systems are inclusive of cloud-based computing, data storage systems, IOT devices, fleet management architecture and on premise to cloud connectivity.

We're at the cutting-edge of IoT, which means a lot of never-before-solved challenges around statefulness, cross-system security, and redundancy. You'll be part of the brain-trust which includes engineering and product leadership to advise on security challenges. To do that, you'll need to have technical depth; systems thinking; and communication skills to evaluate trade-offs around security, compliance, cost, and scale. This is the ideal role for someone in security who's ready to move their career to the next level in terms of technical influence and scope of impact.

Amongst other functional and leadership responsibilities, the security lead will:

Engage and align with technology and business partners to drive a comprehensive information security strategy and ensure information assets and technologies are appropriately implemented and protected.
Establish a strategic road map based on prioritized areas of risk to evolve Humanetics' information security posture for Digital solutions. Implement target milestones and metrics to measure performance. Communicate progress, roadblocks and challenges to key stakeholders.
Update and educate executive team on current cyber threats, issues, and risks; provide regular status updates on initiatives and operations.
Collaborate across business lines; empowering business leaders to take ownership and accountability for risk appetite within respective businesses, and necessary information security practices to ensure protection of business activities.
Partner with engineering on all activities pertaining to the design and implementation of cybersecurity solutions, including the development and maintenance of tools, technology, and processes.
As needed, provide due diligence and support for M&A activity, assess new companies’ security postures for eventual onboarding.
Own and continuously evolve third-party risk management practices including a formal process and framework to assess vendors, service providers and solutions to mitigate third-party risk.
Serve as a thought leader within Humanetics by maintaining a relentless focus on staying ahead of trends in a dynamic cyber environment. Other Significant Role Requirements:
Candidate should have a working knowledge of system and network exploitation, attack methodologies and intrusion techniques; denial of service attacks, man in the middle attacks, malicious code delivery techniques, automated network vulnerability and port scanning, social engineering, network and system reconnaissance.
Candidate should have working knowledge of system and network administration, configuration best security practices, security controls and configuration standards as they apply to security ·
Working or educational knowledge of AWS, GCP, Azure, Cloud security · Candidate must be able to articulate in both written and oral communication to consult in technical and management-related matters
Programming / scripting in Python, bash, Power Shell

Education and/or Experience: ·

7+ years of AWS and security experience ·
Familiarity with security best practices for cloud infrastructure, containers, serverless, and APIs. ·
Experience applying automation (IaC) to security tooling, cloud infrastructure, and build pipelines (e.g. Terraform, AWS managed tooling, Jenkins, NexusIQ, SonarQube, Tenable.io, Burp Suite, etc...).
Comprehensive knowledge of OWASP, static/dynamic analysis, security monitoring, and common exploit tools and methods. ·
Problem solver with the ability to understand the big picture and be willing to drive projects on your own. ·
You are a lifelong learner and passionate about learning new things and taking on new challenges. ·
Highly organized, detail oriented, and able to work autonomously with minimal direction. ·
Possess strong communication, collaboration, and documentation skills · Experienced working remotely including proficiency to communicate over a text-based medium (Slack, Jira, Confluence) and can succinctly document technical details. ·
Certifications such as OSCP, GCSA, AWS SysOps/DevOps/Security are a plus.

Job Types: Full-time, Permanent

Benefits:

Casual dress
Dental care
Employee assistance program
Life insurance
On-site gym
Paid time off
RRSP match
Tuition reimbursement
Vision care
Work from home

Schedule:

8 hour shift

Humanetics Group

New Jobs

Senior Security Architect and Lead