Intelcom | Dragonfly
With more than 100 sorting stations and operations across three continents, Intelcom | Dragonfly is Canada’s leader in last-mile logistics. Our vision is clear: to deliver fast, accurate, and reliable service powered by cutting-edge technology.
A Strategic Role at the Heart of Logistic
Key Responsibilities
Build and lead the team
Lead, coach and grow a team of cybersecurity analysts and engineers.
Set clear objectives, manage performance and build a culture of accountability and continuous improvement.
Shape the function's roadmap, hiring and operating model as it matures.
Own and run our security platforms
Own the security platforms under this function: cloud security posture management, cloud native application protection, container and runtime security, application security testing tools, OT/IoT monitoring, SIEM integration, etc. You'll be accountable for their deployment, configuration, integrations and ongoing health.
Turn new tools into working capabilities. Bring them from purchase to full production with clear coverage goals, onboarding of log and data sources, tuning and runbooks.
Manage the platform lifecycle and vendors, including roadmaps, upgrades, licensing, renewals and budget input, and recommend when to consolidate, replace or retire tools.
Secure our cloud and platforms
Own the security of our CI/CD Pipelines, AWS, Azure and Kubernetes environments, including account and cluster hardening, identity and access, and network controls.
Manage vulnerabilities and misconfigurations across cloud and container workloads, using automated compliance and cloud security posture monitoring.
Secure containers while they run and check our infrastructure-as-code before deployment.
Secure our applications
Own the application security program for our logistics platforms
Build security into CI/CD with our development and DevOps teams: code scanning (SAST), application security testing (AST), dependency checks (SCA) and container image scanning.
Lead threat modeling and secure design reviews for new and high-risk applications and APIs.
Lead penetration testing and manage how application vulnerabilities are prioritized and fixed, working with engineering leads.
Raise developers' security skills through secure coding guidance, training and security champions.
Detect and respond
Own security monitoring, detection and incident response across logistics technology environments.
Drive proactive threat hunting and keep improving detection coverage and quality.
Maintain incident response playbooks for cloud, application and OT/IoT scenarios. Lead investigation, containment and remediation.
Protect our stations
Make sure security controls are in place and monitored across our station network, including OT/IoT and supporting IT infrastructure.
Work with operations teams to reduce risk without slowing the delivery network.
Measure and influence
Define and track KPIs for operational security, and report posture and recommendations to the CISO and senior IT leadership.
Build strong partnerships across infrastructure, DevOps, project teams and the business, and influence decisions without direct authority.
Qualifications
Bachelor’s degree in Information Security, Computer Science, Computer Engineering, or a related field (or equivalent practical experience).
10+ years of experience in cybersecurity, with at least 3+ years in a leadership role focused on security operations, cloud, or OT/IoT security.
Strong expertise in cloud security (AWS, Azure) and containerized environments (Kubernetes, Docker).
Proven record of having managed secure development and DevSecOps practices (CI/CD, code scanning, container hardening).
Proven experience deploying and running enterprise security platforms. Experience with Wiz Cloud, Code and Sensor is a plus.
Experience leading incident detection and response across complex operational environments.
Knowledge of OT/IoT security principles and securing distributed/remote sites.
Proven ability…