Security Analyst

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

Please contact us at the email address provided below if you have any question regarding this opportunity with the federal government. Whether it is wage, location, language, working condition or work culture, we will be happy to answer your questions. We will acknowledge your questions and strive to answer within 48 business hours.

IITB is a national organization, with a wide variety of work that can be performed regardless of geographic location. However, certain positions may require a physical presence at a specific location.

IITB’s Hub locations outside of the NCR (National Capital Region, Ottawa and Gatineau area) are located in: St-John’s, Dartmouth, Charlottetown, Bathurst, Fredericton, Miramichi, Moncton, Saint John, Boucherville, Jonquière, Laval, Montréal, Québec, Shawinigan, Belleville, Chatham, Cornwall, London, Toronto, Mississauga, Windsor, Vaughan, Winnipeg, Regina, Edmonton, Calgary and Vancouver.

You will have to answer a series of screening questions. It is important to clearly demonstrate how you meet essential qualifications relative to education and experience and asset qualifications, if applicable. Please note that it is not sufficient to only state that the requirement is met or to provide a listing of current responsibilities, rather the candidate must provide concrete examples that illustrate how they meet the requirement. Lack of EXAMPLES and DETAILS may result in your application being rejected as the Assessment Board will have insufficient information to determine whether or not you meet the qualifications.

Work environment

We are looking for staff for the IT Security team as part of the IITB. IITB (Innovation, Information and Technology Branch) provides the IT support to our more well-known entity, Service Canada. You will be working in a team under the Director of IT Security, that consists of approximately 70 people. We are growing and we are expecting more positions under the Director in the near future. You will be a part of a team that ensures that Canadian citizen’s information are kept safe.

Intent of the process

A pool of qualified candidates will be established and could also be used to staff similar positions at Employment and Social Development Canada with various tenures, various linguistic requirements, various security requirements and for various locations.

Positions to be filled: Number to be determined

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

Essential criteria are critical for the position. Candidates MUST meet EACH essential merit criterion in order to be found qualified for the position.

ESSENTIAL QUALIFICATIONS:

EDUCATION:

Successful completion of two years of an acceptable post-secondary educational program in computer science, information technology, information management or another specialty relevant to the position to be staffed at the latest on October 31st, 2020 OR an acceptable combination of education, training and/or experience.

Note:
Candidates must have successfully completed two years of an acceptable post-secondary educational program (Cegep, College, University) a the latest on October 31st, 2020.

Degree equivalency

EXPERIENCE:

E1) *Recent experience working as an analyst or occupying a similar position in one or more of the following areas of IT:
a. Network architecture
b. Server administration
c. Database administration
d. Programming/Scripting
e. Network monitoring
f. Administration of email systems
g. Identity
h. Access management
i. Directory services
j. IT security operations
k. Classified systems

E2) *Recent experience contributing to an IT project, initiative or activity.

E3) *Recent experience in conducting technical research and analysis in an Information Technology (IT) environment.

E4) *Recent experience in providing IT advice and guidance to users.

Experience Definition:
*Recent experience is defined as experience normally gained within the last three (3) years.

If you possess any of the following, your application must also clearly explain how you meet it (other qualifications)

Asset criteria could be beneficial / desirable to have now or in the future. They could be used to perform a second screening at the beginning of the process or the manager can use a specific asset criterion for the selection of the “right fit” for the position.

EDUCATION:

OCCUPATIONAL CERTIFICATIONS:

Professional certification or diploma relevant to the position for which you are applying. Examples include, but are not limited to:

OC1- Successful completion of a two year post-secondary educational program in Computer Security, or Cyber Security.

OC2- (ITIL) Information Technology Infrastructure Library Certification (v2/v3).

OC3- CISA: Certified Information Systems Auditor.

OC4- (CISSP) Certified Information Systems Security Professional.

OC5- (GIAC) Global Information Assurance Certification in one of the specializations under the Security Administration category as issued by SANS.

OC6- (OSCP / OSCE) Offensive Security Certified Professional or Offensive Security Certified Expert.

OC7- Successful completion of a CSE IT Security Learning Centre Programs of Study in relation to ITSG-33

Degree equivalency

EXPERIENCE:

AEX1- Experience using security testing tools
AEX2- Experience in network architecture
AEX3- Experience with web development languages
AEX4- Experience on meta exploits utilizing Common Vulnerability Exposure
AEX5- Experience with multiple operating systems
AEX6- Experience in areas of IT Security vulnerability management, incidents response or compliance management.
AEX7- Experience working in Data Loss Protection operational environment.
AEX8- Experience in patch management, antivirus analysis and Endpoint forensics.
AEX9- Experience in analyzing firewall reports.
AEX10- Experience in programming of scripts (e.g. VB, VBA, powershell, Batch file…)
AEX11- Significant experience** of Microsoft Excel (e.g. Pivot table, etc…)
AEX12- Experience in Active Directory (AD) auditing and reporting tools, for example: PowerShell, Change Auditor, Sailpoint, CyberArk.
AEX13- Experience with Malware/Anti-virus tools and processes performing installation, configuration or support.

**Significant experience refers to the depth and breadth of experience associated with the performance of a broad range of related activities which were the candidate’s primary work responsibilities. It will be assessed on the basis of the scope, complexity and the diversity of the work performed.

The following will be applied / assessed at a later date (essential for the job)

Various language requirements
Bilingual BBB/BBB
English/French Essential

Information on language requirements

KNOWLEDGE:

K1) Knowledge of Industry standard IT security policies, practices or publications, applicable to Enterprise or Government.

K2) Knowledge of the principles and practices in one of the following IT areas:
- Risk management
- Security Assessment & Testing
- Security Engineering
- Software Development Security
- Product management
- Communications & Network Security
- Identity and access management
- Vulnerability management
- Incident management
- Project management

K3) Knowledge of the IT Security technology Trends or best practices.

ABILITIES:

A1) Ability to communicate effectively orally.
A2) Ability to communicate effectively in writing.

PERSONAL SUITABILITY:

C1) Initiative
C2) Teamwork
C3) Analytic Thinking
C4) Client Focus

The following may be applied / assessed at a later date (may be needed for the job)

KNOWLEDGE:

AK1- Knowledge of threats as they pertain to an enterprise or government environment.
AK2- Knowledge of the principles and practices of IT incident handling and investigation.

OPERATIONAL REQUIREMENTS:

-Ability and willingness to work overtime occasionally both on evening and weekends
-Ability and willingness to travel
-Certain positions can be virtual.

CONDITIONS OF EMPLOYMENT
Reliability and Security:
Secret security clearance

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

***************************
Application process
***************************
We strongly encourage applicants to submit their applications online.

Following are some of the benefits associated with applying on-line:
• Applicants can create and manage their accounts and apply to job opportunities as long as an internet connection is available.
• Applicants can create a profile and retrieve stored application(s) (personal information,
covering letter and résumé) previously submitted and modify them, if necessary, before
submitting the application.
• Applicants can modify their application/resume at any time BEFORE the closing date indicated on the job advertisement.

Should you be unable to apply on-line onjobs.gc.ca, please submit your application,
quoting the Selection Process Number, to the application contact listed on the poster on or before the closing date.

By answering online screening questions, it is your responsibility, as a candidate, to provide CONCRETE AND DETAILED EXAMPLES to clearly demonstrate how you meet the education, experience and competencies requirements listed in the Essential Qualifications and Other Qualifications sections.

Your answers must include where and how you obtained the required education or experience, as well as the period(s) in which you performed the functions of the position(s). Your answer must include the date format of Month-Year to Month-Year. Failure to provide the above information in the format required may result in your application being rejected from the process.

Information on your described education, experience, etc. provided in the screening
questions should be supported by your resume.

You may save your application as a draft and return to it at a later date. Your application
must be completed and submitted in order to be considered. Partially completed applications, or those in draft cannot be considered. You can make modifications to your submitted application at any time, but once your application has been selected for screening, you will no longer be able to make modifications and your submission will be considered final.

**************************
Assessment
***************************
A variety of assessment tools may be used in the assessment of candidates, such as: written test, practical test, situational exercise, oral interview, simulation, presentation, role play, work samples, performance appraisals, reference checks, and/or assessment board member personal/direct knowledge of candidates’ qualifications. Some assessment tools may be administered electronically, others, in-person.

Please note that asset qualifications, top-down and/or random selection may be used to identify which applications will be given further consideration.

Candidates must meet the essential qualifications to be appointed to a position. The
essential qualifications that are listed in the statement of merit criteria are mandatory.
Applicants may be appointed to the position even though he/she does not meet any or all of the asset qualifications. However, meeting these criteria is desirable and may be a deciding factor in choosing the person to be appointed. In the event that there are as many applicants who meet the essential qualifications as there are vacancies, the manager may decide not to assess some or all of the asset qualifications.

Pass marks will be established for each qualification. However, achieving the pass mark
is not a guarantee of an appointment or that candidates will be put through the next stages of the assessment process. A cut-off score or a top-down approach may be used at any step if there is a sufficient number of candidates to meet immediate and anticipated staffing needs.

All information obtained throughout the selection process, from the time of application
to close of process, may be used to evaluate the candidates.

***************************
Travel status - Travel costs
***************************
Please note you will not be considered to be in travel status or on government business and that travel costs will not be reimbursed.
Consequently, you will be responsible for travel costs.

***************************
Proof of education
***************************
You must provide proof of your education credentials.

Candidates with foreign education credentials are required to provide proof of Canadian
equivalency.

Foreign certificates and/or diplomas must be assessed against Canadian education standards. The federal public service will accept any Foreign Educational Credentials as long as they are deemed comparable to Canadian standards, determined by a recognized credential assessment service.

The Canadian Information Centre for International Credentials (CICIC) assists
persons who wish to obtain an assessment of their educational, professional, and occupational credentials by referring them to the appropriate organizations.

You can access the CICIC website at: https://www.cicic.ca/. This website provides
links to a number of Canadian organizations that provide equivalency assessments.

Original diplomas, degrees or certified transcripts may be required and must be
presented upon request. Failure to produce required documents will result in your
application not being considered.

***************************
Communication
***************************
Acknowledgment of receipt of applications will not be sent.

PLEASE NOTE: Our intention is to communicate with applicants by e-mail for
screening/assessment purposes. It is imperative that you provide a current email address that accepts e-mail from unknown users (some email systems block these types of email). Candidates are strongly encouraged to check their email on a regular basis. It is entirely your responsibility to inform us at all times of any changes regarding your contact information.

***************************
Official languages- Bilingual positions
***************************
Persons are entitled to participate in the appointment process in the official language of
their choice. Applicants will be asked to indicate in their on-line application their preferred official language for each of the following: a) correspondence, b) written exam, and c) interview.

To be considered for a Bilingual Imperative position, you must be willing to undergo Second Language Evaluation testing OR you must already have Second Language Evaluation results (proof will be required).

If you have undertaken Second Language Evaluation by the Public Service Commission, you can obtain a copy of the SLE results, by requesting it at the following website: https://www.canada.ca/en/public-servicecommission/
corporate/about-us/contactus. html#sle.

For more information on SLE, visit the following web-site: https://www.canada.ca/en/publicservice-
commission/services/second-languagetesting- public-service.html

An optional self-assessment of your writing skills in your second official language is available for you to take before completing your application.
https://www.canada.ca/en/public-servicecommission/ services/second-language-testingpublic-service/self-assessment-tests.html

***************************
Other informations
***************************
An assignment, secondment or an acting appointment is a temporary resourcing option.
The approval of your substantive supervisor will be required before an offer can be made.

***************************
What do you need to know about diversity and accommodation?
***************************
Employment and Social Development Canada is committed to employment equity (EE). In order to achieve a representative workforce, selection may be based on qualified candidates selfdeclaring as being a member of one or more of the following EE groups: Aboriginal peoples, persons with disabilities, women and visible minorities.

If you are selected for further consideration, please advise the person who will contact you of any accommodations you may require during the selection process.

The Public Service of Canada is committed to building a skilled, diverse workforce reflective of Canadian society. As a result, it promotes employment equity and encourages candidates to indicate voluntarily on their application if they are a woman, an Aboriginal person, a person with a disability or a member of a visible minority group.

The Public Service of Canada is also committed to developing inclusive, barrier-free selection processes and work environments. If contacted in relation to a job opportunity or testing, you should advise the Public Service Commission or the departmental official in a timely fashion of the accommodation measures which must be taken to enable you to be assessed in a fair and equitable manner. Information received relating to accommodation measures will be addressed confidentially.

Preference

Preference will be given to veterans and to Canadian citizens, in that order, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.