Job ID: 26-00638
Job Title: Penetrating Testing Analyst
Location: Regina, Saskatchewan (On-Site)
Certifications (Must Have):
Valid certifications such as Certified Ethical Hacker (CEH) or Certified Information Systems Security Professional (CISSP) are considered significant assets. Related cyber security certifications will be considered.
Mandatory Skills:
Demonstrated professional experience performing duties as a Penetration Tester.
Demonstrated local knowledge, including experience working with clients or comparable public-sector or enterprise organizations, with a clear understanding of their technical environments and business landscapes. This criterion is heavily weighted and should be described in detail.
Demonstrated experience with recognized cybersecurity standards, including the OWASP Application Security Testing Standard. This criterion is heavily weighted.
Demonstrated experience in cloud security, cloud-based application architectures, and various cloud deployment models.
Demonstrated hands-on experience using industry-standard penetration testing tools.
Demonstrated ability to identify, validate, and exploit security vulnerabilities.
Demonstrated knowledge of common attack vectors and techniques, along with effective mitigation and defense strategies.
Demonstrated experience with regulatory and compliance standards, ensuring adherence during penetration testing activities.
Demonstrated experience conducting static and dynamic application security testing using both automated tools and manual methodologies.
Demonstrated experience performing both white-box and black-box testing engagements.
Demonstrated experience with ISO/IEC 27002:2022, or an equivalent code of practice for information security controls.
Demonstrated experience preparing and presenting comprehensive and well-structured security assessment reports.