Duties of the Resource(s) will include, though are not necessarily limited to:

Mandatory Requirements

Scored Requirements

Local Knowledge - the client is interested in understanding the Resource's experience with government, or comparable entities, as it relates to the technical and business landscape.
Demonstrate a strong working knowledge of cybersecurity standards including the Open Web Application Security Project (OWASP) Application Security Testing Standard. This requirement is heavily weighted.
Demonstrated knowledge of cloud security and cloud-based application architecture and different deployment models.
Demonstrated experience with penetration testing tools.
Demonstrated experience identifying and exploiting vulnerabilities.
Demonstrated knowledge on common attack vectors and techniques, and how to defend against them.
Demonstrated experience in regulatory compliance standards and ensuring compliance during penetration testing.
Demonstrated working experience in static and dynamic application security testing using automated tools and manual techniques.
Demonstrated knowledge of white box testing and black box testing.
Demonstrated a strong familiarity and working experience with the ISO 27002:2013, or equivalent, code of practice for information security controls.
Demonstrated experience writing and presenting detailed assessment reports.
Achievement of Industry accredited security certifications: such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or other equivalent certifications are considered assets.

Manpower Canada

New Jobs