Embedded Cybersecurity Specialist - Pentester Profile

Embedded Cybersecurity Specialist - Pentester ProfileQuebec City, QC (Hybrid) Full Time
Job SummaryCortAIx Factory, based in Quebec City and Montreal, is recognized as a true accelerator of technological innovation for the Thales group and its clients. CortAIx's role is to extend Thales' influence within scientific and technical communities, offering a platform for innovation and knowledge sharing while attracting talented science and technology graduates to refine its expertise.
OUR TEAMThe cortAIx Factory Canada is dedicated to research and development (R&D) work focused on the needs of the Department of National Defence (DND) as well as the Canadian Armed Forces (CAF). These projects, built around digital technologies, require a high level of expertise in a multitude of areas specific to the Canadian armed forces but also depth in complex system architecture. The challenges are very great and must take into account a panoply of parameters as much at the equipment level or even the particular environment of our clients. The team is composed of developers and artificial intelligence specialists.
As an embedded cybersecurity specialist:
You will perform penetration tests on embedded platforms to determine vulnerabilities and advise clients on corrective measures to be taken to resolve them;
You will propose and develop new tools or innovative testing techniques to improve the effectiveness of penetration tests currently in place;
You will participate in reverse engineering processes within a multidisciplinary team to determine potential entry points of investigated complex systems;
You will develop new effects on platforms under test to demonstrate potential impacts that a security flaw could have on this system and those connected to it.
Essential Functions
Participate in software or hardware reverse engineering of certain embedded systems to understand their operation and identify potential vulnerabilities;
Perform penetration tests on embedded systems;
Develop and assemble test benches to perform cybersecurity tests;
Perform tests to confirm vulnerabilities (observation or destructive);
Develop tools to communicate with or analyze the behavior of embedded systems;
Design, program and test software that can be deployed on embedded systems;
Participate inthe smooth running of activities within an Agile team (Sprint Planning, Daily Meeting, Sprint Review and Sprint Retrospective);
Effectively document and communicate the results of tests performed;
Perform all ofthese tasks in compliance with the team's best practices.
Minimum Requirements
Bachelor's degree (or higher) in computer science, electronics or any other related and relevant field;
3 years of relevant experience in embedded systems and/or cybersecurity (junior, intermediate and senior profiles sought);
Have an interest in the field of cybersecurity;
Excellent communication skills, ability to listen and show openness to work with various stakeholders such as clients, scientists and the development team;
Good sense of organization, responsibilities and priorities;
Intellectual curiosity, taste for learning and desire to diversify one's skills;
Skills for teamwork and ability to promote collective intelligence;
A keen sense of code quality as well as good programming and architecture practices is desired;
Knowledge of scripting languages (Python, Bash, PowerShell) and programming languages (C/C++, C#, etc.);
Mastery of Linux operation;
Good command of spoken and written French;
mastery of English is an asset, but not a requirement;
This position requires a good knowledge of English for the drafting of technical documents, to interact, support and/or provide services to international clients, employees and/or partners as well as to foreign government authorities who do not speak French.
Desirable Qualification
Experience in hardware security of embedded system components;
Analysis of side-channel leaks or fault injection on embedded systems to evaluate and validate hardware security at the component level;
Experience with physical reading or probing techniques at the component level;
Knowledge of disassembler software like IDA/Ghidra is an asset;
A keen sense of code quality and good programming and architecture practices is desired;
Experience with Agile development methods (Scrum, Kanban) is an asset;
Interest in embedded systems;
Intellectual curiosity, taste for learning and diversification;
Aptitudes for teamwork and promoting collective intelligence;
A good sense of professional ethics is essential.
This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR) and/or the US Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access including eligibility to the Canadian Controlled Goods Program and able to obtain a Canadian NATO Secret clearance.
Thales provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following:
Company paid Extended Health, Dental, HSA, Life, AD&D, Short-term Disability, travel insurance, Employee Assistance Plan and Well-Being program.
Retirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period.
Company paid holidays, vacation days, and paid sick leave.
Employee Discounts on insurance (home, and auto).
Thales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.
This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR) and/or the US Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access including eligibility to the Canadian Controlled Goods Program and able to obtain a Canadian NATO Secret clearance.
#J-18808-Ljbffr