The Opportunity:Do you live and breathe cyber security? Are you passionate about keeping your workplace, data and operations safe? If this sounds like you, we have an opportunity for you. Maple Leaf Foods is looking for an IT Security Consultant. In this role you will be responsible for:
- Modern cyber security tools and solutions across the NIST phases (identify, protect, detect, respond, recover)
- Leading tools and systems in our modern infrastructure and data-driven culture in expanding automation and controls plants.
- Leading and participating in Network vulnerability evaluations and assessments, Digital forensics, Threat intelligence analysis Active cyber tasks, Malware identification and analysis
- Participating and leading in cyber event mitigation and incident response programs including red teaming.
Any MLF team member interested in being considered for this role are encouraged to apply online by October 19. Applications received beyond that date are not guaranteed consideration.
Reason for vacancy:Existing Headcount
Compensation:$96,000 - $141,000 CAD base pay annually plus annual short-term incentive
The above compensation reflects the target compensation for the position at the time of posting. The base salary offered may vary based on a variety of factors including skills, experience, education, training, job- related knowledge, and other organizational requirements. For part-time roles, salaries are adjusted according to scheduled hours.In addition to base salary, this role is eligible to participate in Maple Leaf's annual short-term incentive plan.
Snapshot of a Day-in-the-Life:- Strong, collaborative team of energetic and experienced security experts
- Support the identification, selection, design, and implementation of cutting-edge security technologies and solutions.
- Design and implement security measures for the protection of computer systems, networks and information both on-premise and cloud-based.
- Identify and define system security requirements.
- Conduct security assessments and translate business and project requirements into documented, risk-based security requirements and recommendations.
- Present security findings, solution options, remediation priorities, and residual risks clearly to technical and business stakeholders, and track recommendations through resolution.
- Perform threat modelling and security design reviews, and develop reusable security patterns, standards, reference architectures, and solution design documentation.
- Design and assess identity and access management controls, including privileged access management, conditional access, identity governance, service accounts, workload identities, and secrets management.
- Embed security into the software development lifecycle through application and API security reviews, CI/CD security controls, code and dependency scanning, infrastructure-as-code review, and container security.
- Design and assess cloud security controls, including secure landing zones, cloud security posture management, workload protection, logging and monitoring, identity configuration, encryption, and native cloud security services.
- Define and assess data security controls, including data classification, information protection, data loss prevention, encryption, key management, retention, and privacy-by-design requirements.
- Coordinate security testing, perform control and configuration reviews, validate remediation, and complete post-implementation security assurance activities.
- Maintain project status, security risk and control-effectiveness reporting, vulnerability trends, and concise executive-ready summaries.
- Provide guidance to teammates and colleagues across the organization on cybersecurity practices and engineering principles
- Develop technical solutions and security tools to help mitigate security vulnerabilities and support efficient operations.
- Prepare and document standard operating procedures and protocols.
- Technical hands-on experience implementing Cloud security solutions and controls on Azure, AWS, or similar cloud service provider.
- Collaborate with internal cyber teams including architecture, GRC and Operations from discovery, scoping & design to the post implementation handover.
- Collaborate with the project stakeholders throughout the project cycle to minimize impact to integrated systems and service ensuring a smooth delivery.
- Collaborate with all functions of the business to constantly improve and evolve our Cyber Security posture.
What You'll Bring:- Undergraduate degree in computer science, engineering, or a related discipline.
- 5+ years' experience in information security or engineering
- 3+ years of industry experience working in Cyber Security, with focus on technical, hands-on delivery of Cyber Security projects.
- Excellent written and verbal communication, interpersonal, intercultural skills, and the proven ability to influence and communicate effectively at all levels
- Knowledge across diverse IT systems, networking, load balancers, firewalls, and security components, Server, hypervisor, security applications, and operating systems.
- Expertise in network security technologies that will aid network projects: e.g., load balancers, Certificates, IDAM, IDS/IPS, VPN, NextGen firewalls, SIEM, Endpoint etc.
- Represent cybersecurity within Enterprise Architecture and Platform Engineering forums to ensure projects and designs are based on internal and industry best security practices.
- Technical experience in designing and implementing infrastructure components required for Cyber-related projects.
- Expertise in the hands-on delivery of advanced, diverse security tools and systems in modern infrastructure.
- Experienced working with the industry recognized frameworks and standards including NIST
- Excellent communication skills, analytical thinking skills and ability to work in a fast-paced environment.
- Expertise in working with SIEM, MDR and managed services and incident response programs and ongoing operating optimization tasks.
Nice to have:
- Industry recognized professional security certifications such as MS Certified Azure Security Engineer, CISSP, CCSK, CCSP, are desired
- Bilingual English/French written language would be an asset
Other Desired Skills:
Knowledge of design, implementation, and maintenance of following security domains & technologies:
- Cloud Security
- DevSecOps
- Zero Trust
- SIEM
- EDR
- Malware defense
- Encryption
- Certificate and Key Management
- Local area networks and firewalls
- Scripting
- Vulnerability management
- IDS/IPS
- Web filtering
- Directory service
- Multi-factor authentication systems
- Exploits and hacking techniques
- Network and operating system security principles
What We Offer at Maple Leaf Foods:- Being part of a high-performance, people-focused company that has an inspiring and unique vision to become the most sustainable protein company on earth, and a deep commitment to sustainable protein across North America.
- An inclusive company culture and a work environment that keeps our people safe, rewards excellence, and empowers everyone to learn and contribute their best.
- Competitive Health and Wellness benefits that offer flexibility to meet your individual or family needs, including programs focused on improving mental health and wellbeing. These benefits start on your first day of employment.
- Defined Contribution Pension Plan with company matching that starts on your first day of employment.
- Learning and development opportunities, including workshops, 'speaker series' events, and resources that allow you to develop your skills and progress your career.
- Comprehensive tuition reimbursement program that supports continuous learning and development of our team members through investment in eligible degrees, diplomas, professional certification, or trades programs.
- Supporting our deep commitment to community impact, we offer up to two paid days annually to volunteer at a cause of your choice.
