Senior Product Security Engineer

Building the space between proven and possible, MDA Space is a trusted mission partner to the global space industry. A robotics, satellite systems and geointelligence pioneer with a 55-year+ story of world firsts and more than 450 missions, MDA Space is a global leader in communications satellites, Earth and space observation, and space exploration and infrastructure.

The global MDA Space team of more than 3,800 space experts has the knowledge and know-how to turn an audacious customer vision into an achievable mission – bringing to bear a one-of-a-kind mix of experience, engineering excellence and wide-eyed wonder that’s been in our DNA since day one.

For those who dream big and push boundaries on the ground and in the stars to change the world for the better, we’ll take you there.

The Position
We’re looking for a Senior S&MA Engineer – Security in our Robotics and Space Operations Team at our Brampton Office.

As a member of the Engineering team you will work on our programs such as Canada Arm 3 and MDA Skymaker products. You will work as part of a technical team to develop new capabilities, enhance existing capabilities and deliver solutions to our customers.

As a Senior S&MA Engineer – Security, you would have responsibilities developing the divisional policies, procedures and verification plans for the cybersecurity elements of MDA’s Robotics and Space Operations products. You will ensure expert support is provided to various product/project teams to ensure that they address the security target and comply with applicable policies, procedures and standards. You will develop and implement the policies, procedures and verification plans to align with the cybersecurity/product security needs of our products.

You will provide insight into vulnerability management and response within complex information systems. Specifically this includes analyzing target environments identifying potential security vulnerabilities, policy violations, unexpected or undesired behaviour and activity.

The successful candidate will have a blend of deep security knowledge, product assurance engineering experience, and experience working within government and defence contracts.

Excellent internal and external communication and leadership skills are necessary in order to lead your team, work closely with the customer, with other technical teams, and to support the development of robust, secure and cost effective systems.

Responsibilities
As a Senior S&MA Engineer – Security (Product Security Role), you may have a wide range of responsibilities that include:

Consulting on the overall policies and procedures from a security perspective;

Develop and implement the policies, procedures and verification plans to align with the cybersecurity/product security needs of our products;

Support security requirements, designs, solutions and mechanisms in response to customer requirements or industry standards

Develop and implement all security acceptance and accreditation processes for systems;

Support engineering program delivery through the development and generation of security related artefacts such as engineering plans, engineering budgets, design reports, and operational concepts;

Review of design material provided by Subcontractors to ensure compliance to requirements;

Support the verification plans for security related aspects of the product/system;

Responsible for ensuring Secure Software Development Lifecycle best practices are applied and measured;

May participate in Product Security Incident Response Team (PSIRT);

Engage and interface across MDA to ensure security alignment between programs, business areas and corporate services.

Direct and mentor other security personnel;

Mandatory experience and skills

10+ years of assurance or security engineering experience;

Experience in the following areas:
Cloud Computing, Network Defense principles and practice, Identity & Privileged Access Management, Information Security, Cross Domain Solutions, Vulnerability Management and Threat Risk Assessment;

Experience Threat and Risk Assessment using HTRA1 methodology.

Experience in the delivery and accreditation of systems/services against NIST SP800-53;

Excel…