II. ROLE

The Security Operations Administrator is responsible for the administration, monitoringthe organization's cybersecurity operations, security technologies, and compliance programs. This role supports the implementation and maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements, NIST SP 800-171 controls, and cybersecurity best practices to protect Controlled Unclassified Information (CUI), business systems, manufacturing operations, and corporate assets.

The incumbent operates and maintains security technologies, supports incident response and vulnerability management activities, and ensures security controls remain effective, compliant, and aligned with business objectives. Working closely with IT Infrastructure, Operations, Engineering, and Corporate Security teams, the Security Operations Administrator helps strengthen the organization's security posture while supporting audit readiness and regulatory compliance.

III. MISSIONS AND RESPONSIBILITIES

CMMC Compliance & Security Governance

Support the implementation, execution, and continuous improvement of CMMC Level 2 and NIST SP 800-171 security controls.
Maintain compliance documentation including:
System Security Plans (SSP)
Plans of Action and Milestones (POA&M)
Policies, procedures, and standards
Risk assessments and security evidence
Monitor and track remediation activities to ensure timely closure of identified gaps.
Assist with control assessments, gap analyses, and readiness reviews.
Support governance, risk, and compliance initiatives.

Security Operations

Operate, administer, and continuously optimize cybersecurity technologies including:
Security Information and Event Management (SIEM)
Endpoint Detection and Response (EDR/XDR)
Security Orchestration, Automation, and Response (SOAR)
Identity and Access Management (IAM)
Multifactor Authentication (MFA)
Security Email Gateways (SEG)
Vulnerability Management Platforms
Network Security Technologies
Monitor and investigate security alerts, suspicious activity, and threat indicators.
Analyze logs, events, configurations, and security telemetry to identify and respond to security threats.
Escalate confirmed threats and security incidents according to established procedures.
Support implementation of secure configurations and system hardening practices based on industry standards and organizational requirements.
Maintain operational security monitoring and reporting capabilities.

Incident Detection & Response

Participate in cybersecurity incident detection, triage, investigation, containment, eradication, recovery, and post-incident review activities.
Coordinate security incident response activities involving regulated data and CUI.
Ensure incidents are documented, tracked, reported, and investigated in accordance with established policies and procedures.
Support forensic evidence preservation and investigation activities when required.
Contribute to incident lessons learned and continuous improvement initiatives.
Participate in cybersecurity exercises, testing, and tabletop simulations.

Vulnerability Management

Operate and support the vulnerability management lifecycle, including:
Identification
Assessment
Prioritization
Remediation
Validation and closure
Conduct vulnerability assessments and track remediation activities.
Collaborate with IT teams to ensure vulnerabilities are addressed within established service-level targets.
Validate remediation effectiveness and report risk status to management.
Support penetration testing and security assessment initiatives.

Documentation & Audit Readiness

Maintain accurate, current, and audit-ready cybersecurity documentation.
Collect, organize, and maintain security evidence including:
System configurations
Security logs
Screenshots
Technical procedures
Assessment artifacts
Support internal audits, external audits, customer assessments, and certification activities.
Assist with audit findings, corrective actions, and remediation plans.
Ensure documentation accurately reflects implemented controls and operational practices.

Collaboration & Security Awareness

Work closely with IT, Infrastructure, Engineering, Operations, and Group Security teams.
Support the secure implementation of new applications, infrastructure, and technology changes.
Provide cybersecurity guidance during projects and change management activities.
Contribute to cybersecurity awareness and training initiatives.
Promote a strong culture of security, compliance, and risk awareness across the organization.

SAFETY, COMPLIANCE & GOVERNANCE

Comply with all company health, safety, environmental, cybersecurity, and information protection policies and procedures.
Support governance frameworks related to cybersecurity, risk management, and regulatory compliance.
Safeguard confidential, proprietary, and Controlled Unclassified Information (CUI).
Maintain accurate records and documentation to support auditability and compliance.
Participate in internal and external audits and implement corrective actions as required.
Promote ethical conduct, confidentiality, and responsible stewardship of company assets and information.

IV. KEY PERFORMANCE INDICATORS (KPIs)

Security Operations

Mean Time to Detect (MTTD) security incidents.
Mean Time to Respond (MTTR) to security incidents.
Security alert investigation and response effectiveness.
Security incident closure rates.

Vulnerability Management

Percentage of critical vulnerabilities remediated within established timelines.
Vulnerability remediation SLA compliance.
Reduction of recurring vulnerabilities and identified risks.

Compliance & Audit

CMMC and NIST 800-171 control compliance status.
Audit readiness and assessment outcomes.
Number of audit findings and timely closure rates.
Completion of remediation plans and corrective actions.

Operational Excellence

Accuracy and completeness of security documentation.
Security tool availability and effectiveness.
Stakeholder satisfaction with cybersecurity services and support.

V. AUTHORITY

Administer and maintain cybersecurity systems, tools, and security controls within approved governance frameworks.
Recommend cybersecurity improvements, risk mitigation measures, and corrective actions.
Escalate cybersecurity risks, incidents, vulnerabilities, and compliance concerns to management.
Coordinate remediation activities with technical teams and vendors.
Initiate approved containment actions during active security incidents.
Restrict or suspend system access when required to protect company assets and information, in accordance with approved procedures.

VI. REQUIREMENTS

Mandatory

Education

Bachelor's Degree or Diploma in Cybersecurity, Information Technology, Computer Science, Information Security, or a related discipline.
Equivalent combinations of education, training, and relevant experience may be considered.

Experience

Minimum 3–5 years of experience in Cybersecurity Operations, Security Administration, Security Operations Center (SOC), Systems Administration, or related cybersecurity roles.
Experience operating and supporting enterprise security technologies and security monitoring functions.
Experience with vulnerability management, incident response, and security operations processes.
Experience supporting compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework (CSF), ISO 27001, or similar standards.

Technical Skills

Experience operating and administering:
Security Information and Event Management (SIEM) platforms
Endpoint Detection and Response (EDR/XDR) solutions
Identity and Access Management (IAM) systems
Vulnerability Management platforms
Security Email Gateways (SEG)
Security Orchestration, Automation, and Response (SOAR) platforms
Ability to analyze:
Security logs
Alerts and events
System configurations
Security incidents
Threat intelligence indicators
Strong knowledge of network environments and security technologies, including:
Switching technologies (copper, fiber, and wireless/Wi-Fi)
Static and dynamic routing
Firewall administration and security policies
VPN technologies, including SSL VPN and IPsec VPN
Network segmentation and secure communications
Proficiency with Windows and Linux operating systems.
Strong understanding of enterprise information systems and cybersecurity principles.
Working knowledge of Active Directory, Entra ID (Azure AD), and modern identity security concepts.
Good understanding of organizational operations, business processes, and information security risks.

Soft Skills

Strong organizational skills with exceptional attention to detail.
Curious mindset with a commitment to continuous learning and professional development.
Strong analytical and problem-solving abilities.
Ability to work independently while collaborating effectively across multiple teams.
Excellent verbal and written communication skills.
Ability to explain technical concepts to both technical and non-technical stakeholders.
Strong sense of accountability, professionalism, and ownership.
Ability to manage multiple priorities in a fast-paced environment.

Preferred

Experience supporting CMMC Level 2 certification readiness and assessments.
Experience handling or protecting Controlled Unclassified Information (CUI).
Experience within manufacturing, aerospace, defense, or other highly regulated industries.
Experience with cloud security technologies in Azure and/or AWS environments.
Experience with security automation and orchestration initiatives.

VII. GENERAL RESPONSIBILITIES

Demonstrate the organization's values through safety, integrity, accountability, collaboration, and continuous improvement.
Develop and maintain positive working relationships with employees, contractors, vendors, auditors, and external stakeholders.
Maintain awareness of emerging cybersecurity threats, technologies, vulnerabilities, and regulatory requirements.
Participate in training, professional development, and certification activities.
Support business continuity, disaster recovery, and operational resilience initiatives.
Identify opportunities to improve cybersecurity effectiveness, efficiency, and automation.
Foster a culture of security awareness and risk management throughout the organization.
Perform other duties and responsibilities consistent with the scope and level of the position as assigned.

Pay: From $100,000.00 per year

Benefits:

On-site parking

Work Location: In person

Latecoere Aerostructures Canada (Avcorp Industries)

New Jobs

Security Operations Specialist

Security Operations Specialist