Senior Product Security Engineer

Job Details

Description

Building the space between proven and possible, MDA Space is a trusted mission partner to the global space industry. A robotics, satellite systems and geointelligence pioneer with a 55-year+ story of world firsts and more than 450 missions, MDA Space is a global leader in communications satellites, Earth and space observation, and space exploration and infrastructure.

The global MDA Space team of more than 3,800 space experts has the knowledge and know-how to turn an audacious customer vision into an achievable mission – bringing to bear a one-of-a-kind mix of experience, engineering excellence and wide-eyed wonder that’s been in our DNA since day one.

For those who dream big and push boundaries on the ground and in the stars to change the world for the better, we’ll take you there.

The Position

We’re looking for a Senior S&MA Engineer – Security in our Robotics and Space Operations Team at our Brampton Office

As a member of the Engineering team you will work on our programs such as Canada Arm 3 and MDA Skymaker products. You will work as part of a technical team to develop new capabilities, enhance existing capabilities and deliver solutions to our customers.

As a Senior S&MA Engineer - Security, you would have responsibilities developing the divisional policies, procedures and verification plans for the cybersecurity elements of MDA’s Robotics and Space Operations products.
You will ensure expert support is provided to various product/project teams to ensure that they address the security target and comply with applicable policies, procedures and standards. You will develop and implement the policies, procedures and verification plans to align with the cybersecurity/product security needs of our products. You will provide insight into vulnerability management and response within complex information systems. Specifically this includes analyzing target environments identifying potential security vulnerabilities, policy violations, unexpected or undesired behaviour and activity.

The successful candidate will have a blend of deep security knowledge, product assurance engineering experience, and experience working within government and defence contracts.

Excellent internal and external communication and leadership skills are necessary in order to lead your team, work closely with the customer, with other technical teams, and to support the development of robust, secure and cost effective systems.

Responsibilities

As a Senior S&MA Engineer – Security (Product Security Role), you may have a wide range of responsibilities that include:

• Consulting on the overall policies and procedures from a security perspective;
• Develop and implement the policies, procedures and verification plans to align with the cybersecurity/product security needs of our products;
• Support security requirements, designs, solutions and mechanisms in response to customer requirements or industry standards
• Develop and implement all security acceptance and accreditation processes for systems;
• Support engineering program delivery through the development and generation of security related artefacts such as engineering plans, engineering budgets, design reports, and operational concepts;
• Review of design material provided by Subcontractors to ensure compliance to requirements;
• Support the verification plans for security related aspects of the product/system;
• Responsible for ensuring Secure Software Development Lifecycle best practices are applied and measured
• May participate in Product Security Incident Response Team (PSIRT)
• Engage and interface across MDA to ensure security alignment between programs, business areas and corporate services.
• Direct and mentor other security personnel

Mandatory experience and skills:

• 10+ years of assurance or security engineering experience;
• Experience in the following areas: Cloud Computing, Network Defense principles and practice, Identity & Privileged Access Management, Information Security, Cross Domain Solutions, Vulnerability Management and Threat Risk Assessment;
• Experience Threat and Risk Assessment using HTRA1 methodology.
• Experience in the delivery and accreditation of systems/services against NIST SP800-53
• Excellent verbal and written communications and customer interaction skills
• Excellent interpersonal skills, problem solving abilities and project execution strengths.

Preferred experience and skills:

• Understanding of government project delivery and execution processes from requirements through commissioning and support;
• Experience with NIST SP-800 suite (e.g.-53, -171) ISO/IEC, DISA STIGs, CIS, SANS standards;
• Experience in the delivery and accreditation of systems/services against recognized industry or government standard such NIST 800-171, SOC1, SOC2, ISO27001
• Experience in developing security elements as inputs to System Engineering Management Plans;
• Experience in designing, deploying and working with technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Intrusion prevention System (IPS), Endpoint Detection and Response (EDR), Identity & Privileged Management technologies
• Establishing business processes and procedures;
• Experience using Open Source Security Testing Methodology
• Experience Threat Modeling using industry standards such as PASTA, DREAD,
• Experience using an Application Security Verification Standard such as OWASP ASVS
• Experience with OWASP References and SQL Vulnerabilities
• Familiarity with requirements management software
• Certifications such as: Certified Cloud Security Professional (CCSP) Certified Information Security Manager (CISM) Offensive Security Certified Professional (OCSP)

Education:

• A University degree in Engineering, Computer Science, or related field from an accredited institution is preferred. Equivalent work experience with certifications will also be considered.

Comments/Special Considerations:

Successful candidates must obtain and hold security clearance at the reliability status level, and pass security assessment for the Controlled Goods Program (CGP).

We’re a dream team of purpose-driven, collaborative and passionate people, and we are constantly looking for others to join #TeamMDA to ignite new and innovative approaches to problem-solving that push us forward to improve life on and above Earth. If you’re excited to expand our place in space and driven to inspire the next generation, we’ll take you there.