INTRO

Canadian Nuclear Laboratories (CNL) is Canada's premier nuclear science and technology organization. CNL has been a world leader in developing peaceful and innovative applications from nuclear technology through its expertise in physics, metallurgy, chemistry, biology and engineering. CNL's 3500 highly skilled employees deliver a range of nuclear services – from research and development, design and engineering to specialized technology, waste management and decommissioning.

CNL's cyber security research team located in Fredericton, New Brunswick, conducts leading edge research in cyber security of instrumentation and control systems for the nuclear industry and other critical infrastructure. They have a sophisticated cyber range comprising IT and industrial components to support evidence-based research.   

CNL is looking for an IT Security Analyst who has a passion for technology, appreciates process rigour, and enjoys the responsibility for ensuring that the performance and availability of applications and network infrastructure is optimal, secure, and meets the needs of the research team.  

DUTIES

CNL is looking for an IT Security Analyst to perform the following duties:

• Configure, test, and maintain LAN equipment and services, including switches, routers, and VPN.
• Create virtual machines and set up all networking and scripts required to support research configurations
• Configure, maintain and perform ongoing monitoring of MS Windows Server and Workstation technologies (e.g., Active Directory, DNS, DHCP, WSUS, Group Policies)
• Configure, maintain and perform ongoing monitoring of Linux-based Servers and workstations
• Set up user accounts, permissions and passwords to ensure authorized access and compliance with policy.
• Deploy, configure, monitor and maintain security appliances (e.g., Firewalls, IDS/IPS, SIEMS, forensic analysis tools)
• Monitor, respond to and remediate security incidents
• Perform vulnerability and network scanning assessments
• Determine the setup, configuration and maintenance required for new and/or upgraded systems/applications
• Create and maintain comprehensive documentation as it relates to server and network topology, equipment, and configurations, including network design and diagrams, and ensure the timely review and update of the documentation.
• Participate in the creation, maintenance, testing, and execution of a Disaster Recovery plan and ensure that all systems are appropriately backed up. Backup to be reviewed regularly to ensure it is operating as required.
• Create, request, and present technical specifications and requirements for purchasing of IT/Security hardware and software, and coordinate with vendors and suppliers for purchases and solutions.
• Maintain asset inventory and manage licenses
• Participate in and support rigorous change management practices
• Work in team environment, understanding and responding to the needs of the team in a collaborative, proactive, and technically diverse and challenging environment
• Other duties as required.  

QUALIFICATIONS
 

• 3-5 years of relevant experience and recognized certifications in the administration and support of IT systems.A diploma or a degree from a recognized technical college or relevant experience in the area of cyber security.Undergraduate degree in Computer Science or Engineering would be considered an asset.

• Proven hands-on experience configuring and deploying MS Active Directory, and Windows Server services (e.g., DNS, DHCP, WSUS, Group Policies)

• Have 3+ years of experience in security technologies such as End Point Protection, Malware Protection (Network), Patch Management, URL filtering, Identity and Access management (IAM), IDS/IPS, SIEM.

• Have practical knowledge and hands-on experience with one or more of the following:

  • Risk and vulnerability analysis

  • Incident response and forensic analysis

  • Penetration testing

  • Threat intelligence

  • Proven ability to conduct research into information security issues and security products as required.

  • Strong technical problem solving skills; ability to handle software and hardware problems; devise new approaches, apply existing criteria in new manners, and draw conclusions.

  • Strong verbal and written communication skills

  • Proven experience preparing procedural documentation to deploy, operate and maintain assets

  • Knowledge of configuration management or software revisioning tools is an asset

  “A valid security status or security clearance is a condition of employment with CNL.  Eligibility requirements for a security screening are outlined in the Treasury Board Secretariat of Canada – Standard on Security Screening”.   

Note that the cyber security team at CNL is in a growth phase; job postings will remain listed until all positions are filled.