Vulnerability Management Security Analyst

Job Description

Location: Ottawa, ON (Hybrid/Remote based on project requirements)
Security Clearance: Top Secret Clearance Eligibility Required 
Employment Type: Long-term Contract / Consultant
Client: Government of Canada

OBJECTIVE
The objective is to leverage subject matter expertise in IT Security Analysis to evaluate, develop, support and implement technology for the security of IT infrastructure and systems. The Resource (s) will provide IT Security expertise, advice, guidance and recommendations, review IT Security policies, procedures and guidelines, provide analysis and recommendations on technical issues, logistical support for day-to-day activities and projects, on-the-job training.

SCOPE OF WORK
Canada requires the services of Contractors for key technology directorate initiatives including new projects and application support.

RESPONSIBILITIES
• Provide IT Security expertise to various IT employees including project teams;
• Create, implement, support and execute activities that are related to the IT Security Technology;
• Provide support for all Enterprise suite of technologies (as required) including resolving issues.
• Provide development, customization and implementation services related to our Enterprise Security Infrastructure.
• Develop documentation (directly or with assistance from other team members) related to all deliverables generated as a result of either project execution or as part of the support provided for the monitoring suite of technologies.
• Provide knowledge transfer through documentation, in-person instruction and technical demonstrations to full-time employee(s) with respect to everything that has been accomplished with each technology, for them to be able to provide enhancement, modification and administration services surrounding these technologies, and for them to eventually attain operational autonomy with respect to these technologies.
• Develop and provide cross training to staff (directly or with assistance from other team members) on the use of the various Enterprise suite of technologies for on-going operations and support.
• Provide support for security related technologies and processes;
• Produce reports, presentations, briefing notes or technical documentation;
• Prepare and provide training sessions and briefings to technical staff, end users, and management;
• Provide on-the-job training to IT employees;
• Provide other consultation as required;
• Provide analysis and recommendations on technical matters; • Provide logistical support to the team and projects;
• Liaise with internal clients (including management), internal and external partners to resolve issues, recommend improvements or next steps;
• The Project Authority will assign detailed Tasks to the Contractors regularly based on project needs. The project authority will monitor the deliverables of the Contractors on a regular basis and ensure that work is completed to the satisfaction of the project authority.

DELIVERABLES
-Provide IT Security expertise to various IT employees including project teams;   Create, implement, support and execute activities that are related to the IT Security Technology;
-Provide support for all Enterprise suite of technologies (as required) including resolving issues.
-Provide development, customization and implementation services related to our Enterprise Security Infrastructure.
-Develop documentation (directly or with assistance from other team members) related to all deliverables generated as a result of either project execution or as part of the support provided for the monitoring suite of technologies.
-Provide knowledge transfer through documentation, in-person instruction and technical demonstrations to full-time employee(s) with respect to everything that has been accomplished with each technology, for them to be able to provide enhancement, modification and administration services surrounding these technologies, and for them to eventually attain operational autonomy with respect to these technologies.
-Develop and provide cross training to staff (directly or with assistance from other team members) on the use of the various Enterprise suite of technologies for on-going operations and support.
-Provide support for security related technologies and processes;
-Produce reports, presentations, briefing notes or technical documentation;
-Prepare and provide training sessions and briefings to technical staff, end users, and management;
-Provide on-the-job training to IT employees;
-Provide analysis and recommendations on technical matters, and;
-Provide logistical support to the team and projects.
-Liaise with internal clients (including management), internal and external partners to resolve issues, recommend improvements or next steps.
-The Project Authority will assign detailed Tasks to the Contractors on a regular cadence based on project needs. The project authority will monitor the deliverables of the Contractors on a regular basis and ensure that work is completed to the satisfaction of the project authority.

Senior Vulnerability Management Security Analyst
• University undergraduate degree or diploma and Ten (10) years cumulative progressive experience in the following IT security domains:
o Hands-on experience in developing, executing, managing and automating vulnerability assessments and vulnerability scanning infrastructure, including in cloud and containerized environments.
o Experience in threat hunting, threat intelligence platforms, and collection and analysis for the purpose of mitigating emerging risks.
o Experience in leading vulnerability management and threat intelligence programs, including strategy development, policy creation and integration with other business units.
o Experience in vulnerability prioritization methodologies such as risk-based scoring, business impact analyses, and remediation lifecycle management.
o Experience in integrating vulnerability data with SIEM and SOAR platforms.

Intermediate Vulnerability Management Security Analyst
• University undergraduate degree or diploma and Five (5) years of cumulative progressive experience in the following IT security domains:
o Hands-on experience in developing, executing, managing and automating vulnerability assessments and vulnerability scanning infrastructure, including in cloud and containerized environments.
o Experience in threat hunting, threat intelligence platforms, and collection and analysis for the purpose of mitigating emerging risks.
o Experience coordinating vulnerability remediation efforts with cross-functional

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.

This posting is for a public sector assignment. Compensation will be determined through the competitive bidding process and will be within the approved rate structure for this assignment.