SPECIALIST, IT SECURITY – CONTAINER SECURITY AND CLOUD OPERATIONS - Jobs in Montréal, QC

Job Description

No other bank is doing what we do.At BDC, we help Canada and its entrepreneurs create a prosperous, inclusive and green economy. Our mission is to help Canadian businesses thrive by providing financing, capital and advisory services. We’re devoted to Canadian entrepreneurs. We’re also dedicated to our employees. Adaptable. Inspiring. Different. There’s a reason we like to work here, and we think you’ll like it too. Join BDC and help make a difference!Diversity. Equity. Inclusion. They’re more than just words for BDC. These concepts are foundational to our success and to our ability to attract, retain, mobilize and develop the right talent, as well as to offer a healthy, professional and collaborative environment. We are committed to cultivating and preserving an environment where all employees can thrive, and, for over a decade, we have been recognized as one of Canadas Top 100 Employers and one of Canadas Best Diversity Employers. In recruiting for our team, we welcome the unique contributions that you can bring in terms of your education, opinions, culture, ethnicity, race, sex, gender identity and expression, nation of origin, age, languages spoken, veteran’s status, color, religion, disability, sexual orientation, beliefs, experiences, and more.POSITION OVERVIEWThe Specialist, IT security – container security and cloud operations is responsible for the day-to-day security activities to ensure BDC’s technological environment is well protected. They gather and analyze information on BDC’s technology, making recommendations and resolving security issues as required.CHALLENGES TO BE MET

• Maintain quality and stability of telemetry coming from various log sources, investigate alerts and with heavy emphasis on Container security.
• Develop, deploy, and maintain tools and processes related to periodic security monitoring and to tasks involving security operations with concentration in, but not limited to, Container infrastructure (Kubernetes, Docker, K8, Tanzu BOSH), whether on prem or cloud-based container services (EKS, AKS, Openshift).
• Stay abreast of Linux and Container Infrastructure capabilities and security as they evolve. Build well-designed, testable, efficient monitoring use cases using tools such as SYSLOG telemetry, Aquasec, Sysdig, Stackrox or Prisma Cloud.
• Analyze incoming security events based and raw telemetry, network, endpoint, SaaS, and log sources expediently, consistently, and accurately for abnormal events.
• Work closely with IT operations and other teams to implement and continuously improve controls efficiency.
• Regularly verify and analyze all systems and application logs in order to identify suspicious activity and recommend solutions to eliminate or mitigate risks.
• Build, run, and own infrastructure and automation to detect, contain, and eradicate security threats.
• Develop alerting and detection strategies to identify malicious or anomalous behavior.
• Develop new and novel defensive techniques to identify or counteract changes in adversary techniques and tactics.
• Lead and/or participate in Incident Response efforts as it pertains Containerized workloads.
• Take part in verifications and structured security assessments of BDC’s technological environment to ensure that it is protected and complies with established security standards; prepare documents for distribution and provide technical support to the teams responsible for the computer environment.
• Help resolve complex security issues, investigations, and cyber advisories in order to improve methods for ensuring the safety of BDC’s technological environment.
• Help identify security solutions for various BDC systems.
• Participate in the development and evolution of technological environment security directives, processes and standards and participate in the development of the procedures needed to implement and maintain them.

WHAT WE ARE LOOKING FOR

• Minimum eight years’ experience in IT, five of which in network and/or security
• Must have solid experience with Linux security and Containerized workloads
• Experience with tools such as Container security tools such as Aquasec, Sysdig or Stackrox is highly preferred
• Experience with AWS security monitoring
• Must have some experience with at least one of each leading SIEM and EDR tools: Splunk, Qradar, SentinelOne, Crowdstrike and related CSPM, CWPP features
• Any of the following certifications: GSEC, GPPA, GCIA, GCWN, GMON, GCDA, OSCP or other container or cloud security focused certifications
• Experience with logging and monitoring systems
• Familiar with cyber frameworks such as ATT&CK, Cyber Kill Chain and Diamond Model
• Experience in a Security Operations Center (SOC) or Cyber Incident Response Team (CIRT), preferably in security monitoring and security incident response
• Experience with infrastructure automation, configuration management, and developer workflows
• Experience with Continuous Delivery pipelines and the tools used to deliver solutions (GIT, Ansible, Terraform, AWS Code Deploy, Azure DevOps, etc.)
• Experience with on-premise Kubernetes and container security management is highly desirable
• Detailed understanding of securing the end-to-end image/container lifecycle from image build to production deployment
• Understanding of CVE - how to identify and remediate Linux Containers
• Experience in SecOps principles and tools for container security management and in detail level on Namespace, Container and Pods
• Leadership, autonomy, vigilance, team spirit, ability to see the big picture, and discretion
• Ability to simplify complex issues
• Knowledge of open source platforms
• Sense of priority, understanding of issues, criticality and impact
• Ability to share information with peers and transfer knowledge
• Ability to handle multiple requests and manage priorities
• Ability to effectively communicate in both official languages (French and English)
• Ability to thrive in our small, fast-paced, product-driven environment
• Ability to collaborate with teams from across the organization
• Ability to execute on tight schedules and under pressure
• Ability to present ideas in business-friendly and user-friendly language
• Ability to engineer systems that are maintainable, flexible and scalable
• Ability to follow a disciplined workflow driven by well-defined requirements
• Ability to demonstrate ownership of tasks with escalation as needed
• Ability to be a subject matter expert in how a set of technologies work together
• Ability to relentlessly push for successful operational outcomes
• Strong interest or background in cyber security

With us, youll be able to achieve the work/life balance youre looking for, with competitive working conditions and above-market flexible benefits. This includes modern workspaces to work from when you are in our offices, and, for some specific positions, the ability to work remotely, on reserve, and/or within your community.While we appreciate all applications, we advise that only the candidates selected to participate in the recruitment process will be contacted. If you are a candidate with a disability and need an accommodation to complete the application process, please email us at accessibility@BDC.ca, and include your full name, the best way to reach you, and the accommodation needed to assist you with the application process.Quick Apply

• Terms & Conditions
• New Privacy
• Privacy Center
• Accessibility

For Job Seekers

• Browse Jobs
• Advanced Job Search
• Emplois Quebec

For Employers

• Post a Job
• SimplyHired OnDemand

Stay Connected