Security Specialist (Penetration Tester) 8437-3112

Foilcon; Toronto; Hybrid; CAD 80,000 - 120,000; Full time

Job summary

An innovative firm is seeking a Security Specialist (Penetration Tester) to join their dynamic team. This hybrid contract role offers the opportunity to conduct penetration tests and vulnerability assessments for critical applications within the Ontario Public Service. As a key player in enhancing security measures, you'll evaluate security architecture requirements and advise on risk management strategies. If you have a passion for IT security and thrive in a collaborative environment, this is the perfect opportunity to make a significant impact while working with cutting-edge technologies. Join us and help safeguard vital information resources!

Qualifications

• Experience in penetration testing and vulnerability assessments.
• Strong analytical and problem-solving skills are essential.

Responsibilities

• Conduct penetration tests and vulnerability assessments for applications.
• Define security architecture requirements for IT projects.

Skills

Penetration Testing

Vulnerability Assessment

Analytical Skills

Communication Skills

Problem Solving

Leadership

Project Management

Network Security

Education

Relevant IT Security Certification

Bachelor's Degree in Computer Science or related field

Tools

Automated Testing Tools

Security Audit Tools

Network Monitoring Tools

Job description

Security Specialist (Penetration Tester) 8437-3112

Join to apply for the Security Specialist (Penetration Tester) 8437-3112 role at Foilcon.

HM Note: This hybrid contract role is three (3) days in office. Candidates' resumes must include first and last name. The role commences April 1, 2025.

Description

Responsibilities:

1. Conduct penetration tests, web application vulnerability assessments, code reviews and network vulnerability assessments of all environments or applications related to the OPS province-wide I&IT infrastructure and information resources.
2. Define, evaluate, and assess security architecture requirements for systems environments and IT projects.
3. Ensure the incorporation of IT security and contingency measures in the development of systems.
4. Advise on the identification, analysis, and resolution of specific security factors, risks, vulnerabilities; protection of personal privacy issues; and appropriate industry and international security standards.
5. Carry out information and information technology (I&IT) security projects and tasks in the Ontario Public Service as assigned by Corporate Security or cluster I&IT management.

General Skills

1. Experience in vulnerability assessment/penetration testing of web applications by identifying, analyzing and exploiting common vulnerabilities contained in web applications using manual techniques and automated tools appropriate for enterprise use.
2. Experience performing penetration tests and red team assessments.
3. Experience with vulnerability assessment methodologies, tools and techniques used to conduct network vulnerability assessments and penetration testing.
4. Knowledge of techniques to secure information assets and the planning, design, and implementation of security technologies.
5. Proven techniques to discover gaps or weaknesses in security architecture to identify and mitigate known security threats or inherent weaknesses.
6. Strong understanding and expertise in security architecture.
7. Knowledge and understanding of relevant legislation and corporate directives related to the security and confidentiality of information (e.g. Freedom of Information and Protection of Privacy Act).
8. Solid knowledge of current security and contingency technology and techniques (e.g. digital signature, encryption, access controls, fire-walls, authentication, virus protection, etc.); and a proven working knowledge of security audit procedures and protocols.
9. Experience in establishing secure environments at a network, operating system or application level.
10. Experience with implementing security on complex and distributed systems.
11. Experience in writing reports to a large audience both at an executive/non-technical management level and technical resources.
12. Awareness of emerging IT trends and directions, especially as related to security.
13. Excellent analytical, problem-solving, and decision-making skills; written and verbal communication skills; interpersonal and negotiation skills.
14. A team player with a track record for meeting deadlines, managing competing priorities and client relationship management experience.
15. Experience with multiple operating systems such as Windows and Linux, multiple programming languages such as .NET and Java, and common network services and protocols.

Skills

Experience and Skill Set Requirements

1. Mandatory Requirement: Current penetration test experience.
2. PENETRATION TEST EXPERIENCE: 35% Demonstrated experience in identifying, analyzing, and exploiting common vulnerabilities using both manual techniques and automated tools for web and network pen testing and vulnerability assessments.
3. TECHNICAL EXPERTISE: 25% Experience with multiple operating systems, programming and scripting languages, platforms, and network services and protocols.
4. ANALYTICAL AND PROBLEM SOLVING SKILLS: 20% Demonstrated analytical and problem-solving skills to determine alternative and innovative solutions.
5. COMMUNICATION AND RELATIONSHIP BUILDING SKILLS: 10% Experience with writing reports aimed at both the executive/non-technical management level, and technical analyst level.
6. LEADERSHIP AND PROJECT MANAGEMENT SKILLS: 10% Proven ability to provide leadership, advice, and direction on business risk planning and coordination.

Seniority level

Mid-Senior level

Employment type

Contract

Job function

Information Technology

Industries

IT Services and IT Consulting