Manager - Logistics Technology SecOps
- Montreal, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- 10+ years of experience in cybersecurity, with at least 3+ years in a leadership role focused on security operations, cloud, or OT/IoT security.
- Posting language
- English
- Posted
Original job description
With more than 100 sorting stations and operations across three continents, Intelcom | Dragonfly is Canada’s leader in last-mile logistics. Our vision is clear: to deliver fast, accurate, and reliable service powered by cutting-edge technology.
A Strategic Role at the Heart of Logistic
Key Responsibilities
Build and lead the team
- Lead, coach and grow a team of cybersecurity analysts and engineers.
- Set clear objectives, manage performance and build a culture of accountability and continuous improvement.
- Shape the function's roadmap, hiring and operating model as it matures.
- Own the security platforms under this function: cloud security posture management, cloud native application protection, container and runtime security, application security testing tools, OT/IoT monitoring, SIEM integration, etc. You'll be accountable for their deployment, configuration, integrations and ongoing health.
- Turn new tools into working capabilities. Bring them from purchase to full production with clear coverage goals, onboarding of log and data sources, tuning and runbooks.
- Manage the platform lifecycle and vendors, including roadmaps, upgrades, licensing, renewals and budget input, and recommend when to consolidate, replace or retire tools.
- Own the security of our CI/CD Pipelines, AWS, Azure and Kubernetes environments, including account and cluster hardening, identity and access, and network controls.
- Manage vulnerabilities and misconfigurations across cloud and container workloads, using automated compliance and cloud security posture monitoring.
- Secure containers while they run and check our infrastructure-as-code before deployment.
- Secure our applications
- Own the application security program for our logistics platforms
- Build security into CI/CD with our development and DevOps teams: code scanning (SAST), application security testing (AST), dependency checks (SCA) and container image scanning.
- Lead threat modeling and secure design reviews for new and high-risk applications and APIs.
- Lead penetration testing and manage how application vulnerabilities are prioritized and fixed, working with engineering leads.
- Raise developers' security skills through secure coding guidance, training and security champions.
- Own security monitoring, detection and incident response across logistics technology environments.
- Drive proactive threat hunting and keep improving detection coverage and quality.
- Maintain incident response playbooks for cloud, application and OT/IoT scenarios. Lead investigation, containment and remediation.
- Make sure security controls are in place and monitored across our station network, including OT/IoT and supporting IT infrastructure.
- Work with operations teams to reduce risk without slowing the delivery network.
- Define and track KPIs for operational security, and report posture and recommendations to the CISO and senior IT leadership.
- Build strong partnerships across infrastructure, DevOps, project teams and the business, and influence decisions without direct authority.
- Bachelor’s degree in Information Security, Computer Science, Computer Engineering, or a related field (or equivalent practical experience).
- 10+ years of experience in cybersecurity, with at least 3+ years in a leadership role focused on security operations, cloud, or OT/IoT security.
- Strong expertise in cloud security (AWS, Azure) and containerized environments (Kubernetes, Docker).
- Proven record of having managed secure development and DevSecOps practices (CI/CD, code scanning, container hardening).
- Proven experience deploying and running enterprise security platforms. Experience with Wiz Cloud, Code and Sensor is a plus.
- Experience leading incident detection and response across complex operational environments.
- Knowledge of OT/IoT security principles and securing distributed/remote sites.
- Proven ability to design and manage security monitoring, detection, and response capabilities in operational environments.
- Demonstrated experience managing KPIs, metrics, and reporting on security posture to senior leadership.
- Track record of managing and mentoring teams, including setting objectives, performance management, and professional development.
- Strong collaboration and communication skills, with the ability to influence across technical and business stakeholders.
- Experience in logistics, transportation or other OT-heavy environments.
- Familiarity with NIST CSF, ISO 27001 or MITRE ATT&CK for ICS.
- CISSP, CISM, CCSP or CKS certification.
- Experience securing operations across multiple countries.
Benefits
At Intelcom | Dragonfly, you’ll thrive in a flexible and stimulating environment, surrounded by passionate talent. You’ll also enjoy a wide range of benefits:
- On-site gym with a personal trainer
- Employer-provided lunch of your choice
- Comprehensive group insurance
- Group RRSP plan
- Care & Well‑Being Activities
- Partial reimbursement for public transportation
- Employee Assistance Program
This position has been opened to address a genuine organizational need within the company.
At Intelcom | Dragonfly, we move forward guided by strong values: collaboration, innovation, excellence, and responsibility.
We embrace diversity, ensure equity, and foster a true sense of belonging.
Accommodation measures are available for individuals with disabilities throughout our recruitment process, in compliance with the law. Please let us know if you have any specific needs.
More about this job
Responsibilities
Lead and develop the cybersecurity team while owning security platforms and security across cloud, Kubernetes, CI/CD, applications, and distributed logistics stations. Direct monitoring, threat hunting, incident response, vulnerability remediation, security metrics, and collaboration with technical teams and senior leadership.
Requirements
Requires a bachelor’s degree in information security, computer science, computer engineering, or a related field (or equivalent experience), plus 10+ years in cybersecurity and at least 3 years in a relevant leadership role. Candidates should have strong cloud, container, DevSecOps, security platform, incident response, OT/IoT, team leadership, and senior-level reporting experience.
Skills
- Cybersecurity Leadership
- Cloud Security
- AWS
- Azure
- Kubernetes
- Docker
- DevSecOps
- CI/CD Security
- Application Security
- Security Operations
- Incident Detection and Response
- Threat Hunting
- OT/IoT Security
- Security Platform Management
- Vulnerability Management
- Security Metrics and Reporting
Benefits
- On-Site Gym With Personal Trainer
- Employer-Provided Lunch
- Comprehensive Group Insurance
- Group RRSP Plan
- Care and Well-Being Activities
- Employee Assistance Program
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Management & Leadership
- Logistics
- Transportation
Keywords
- Cybersecurity
- Security Operations
- AWS
- Azure
- Kubernetes
- Docker
- CI/CD
- DevSecOps
- Cloud-Native Application Protection
- Container Security
- Runtime Security
- Application Security Testing
- OT/IoT Security
- SIEM
- SAST
- SCA
- Threat Modeling
- Penetration Testing
- Threat Hunting
- Incident Response
- Infrastructure as Code
- Wiz Cloud
- Wiz Code
- Wiz Sensor
- NIST CSF
- ISO 27001
- MITRE ATT&CK for ICS
- CISSP
- CISM