Cyber-Security Analyst

Update: The closing date has been extended.

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

***VERY IMPORTANT NOTE***
In order for your application to be considered, all screening questions must be answered. You must provide concrete examples to demonstrate how you meet each qualification.
Applicants must clearly outline how they meet each of the screening criteria (i.e. Education and Experience Qualifications, both Essential and Assets). Please note that it is not sufficient to only state that you meet the requirements, to provide a listing of your current responsibilities or to write "See CV". In your answers to the screening questions, you must provide concrete examples that illustrate how you meet the requirements. Failure to do so could result in your application being rejected from this process.

Please note that the screening/text questions in the on-line application will be used to assess the ability to communicate effectively in writing.

Work environment

Natural Resources Canada’s Cyber Security Team provides a dynamic environment with strong collaboration and engagement in place. The Manager of Cyber Security strongly encourages members of the Team to empower their respective work areas and remains engaged on supporting decisions made. Teleworking is encouraged in support of applying and maintaining appropriate family and work balance.

Intent of the process

ANTICIPATORY PROCESS - A pool of candidates may be established through this process to staff identical or similar positions at Natural Resources Canada at the CS-02 group and level with various tenures (determinate period or indeterminate), various linguistic requirements (Bilingual imperative or non-imperative) and profile(s) (BBB/BBB, CBC/CBC, CCC/CCC), various security requirements (i.e. Reliability, Secret, Top Secret), various conditions of employment and for various locations.

Positions to be filled: 1

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

EDUCATION
The minimum standard is:
Successful completion of two years of an acceptable post-secondary educational program in computer science, information technology, information management or another specialty relevant to the position to be staffed.
Notes:
1. Indeterminate period incumbents of positions in the CS group on May 10, 1999, who do not possess the education prescribed above, are deemed to meet the minimum education standards based on their education, training and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the CS group.
2. It is the recognized educational institution (e.g. community college, CÉGEP or university) that determines if the courses taken by a candidate correspond to two years of a post-secondary program at the institution.
3. At the manager's discretion, an acceptable combination of education, training and/or experience may serve as an alternative to the minimum post-secondary education stated above. Whenever the minimum education is met using this alternative, it is met for the specific position only and must be re-assessed for other positions for which this alternative has been specified by the manager.

Degree equivalency

The following will be applied / assessed at a later date (essential for the job)

Bilingual - Imperative (BBB/BBB)

Information on language requirements

EXPERIENCES:
CANDIDATES MUST MEET AT LEAST TWO OF THE FOLLOWING EXPERIENCES:
► Recent* and significant** experience in an operational role in a Cyber / IT Security operations environment.
► Recent* and significant** experience maintaining and operating IT security related systems including system upgrades.
► Recent* and significant** experience monitoring system and network activity to prevent, detect, respond and remediate incidents.
► Recent* and significant** experience maintaining and monitoring operations of IT systems, and upgrading or implementing new IT systems.
► Recent* and significant** experience developing and implementing secure designs or configurations for web applications on Windows and Linux platforms.
► Recent* and significant** experience interpreting client needs, designing and recommending technical solutions.
► Recent* and significant** experience Cloud computing.

Note:
Recent* is defined as within the last 3 years.
Significant** is defined as experience where the activities were a core part of the candidate’s regular employment duties for at least 12 months in the last three years.

KNOWLEDGES:
CANDIDATES MUST MEET AT LEAST TWO OF THE FOLLOWING KNOWLEDGES:
► Basic enterprise security architecture from an operational perspective (principles of layered defence and major components).
► Common types of malware and remediation processes.
► Common cyber security tools and their usage.
► Common network protocols, standard ports and their usage.
► Current and emerging trends in cyber security.
► Common web application vulnerabilities (OWASP Top 10) and related remediation measures.
► The fundamental principles of the Canadian Cyber Security Strategy.
► Communications Security Establishment (CSE) Top 10 IT Security Actions to Protect. Government of Canada Internet-Connected Networks and Information.

ABILITIES:
► Ability to interpret user requirements and provide assistance.
► Ability to effectively communicate with multiple stakeholders/clients including both private and public sectors.
► Ability to communicate well orally and in writing.

PERSONAL SUITABILITIES:
► Tact & diplomacy
► Dependability & flexibility

The following may be applied / assessed at a later date (may be needed for the job)

ASSET QUALIFICATIONS
EDUCATION:
► Graduation from a recognized university with specialization in computer science or a related field.
► Recognized IT industry certifications from Microsoft, Cisco or other vendors.
► Cyber / IT Security related certifications such as CompTIA Security+, SANS GIAC, ISC2 SSCP, CSSLP or CISSP, EC-Council.
► Cloud Certifications (Microsoft Azure, Amazon AWS, Google, ISC2).

Degree equivalency

EXPERIENCES:
► Experience with Linux operating systems.
► Experience with scripting languages in Linux and Windows (Bash/shell, Python, Ruby, PowerShell).
► Experience with web technologies and programming (Apache, IIS, PHP, .NET).
► Experience with database structure, queries and security (MS-SQL, MySQL, Postgres).
► Experience with vulnerability scanning and penetration testing tools.

KNOWLEDGES:
► Knowledge of System hardening techniques.
► Knowledge of the system development lifecycle (SDLC) and principles of secure system development.
► Knowledge of Government of Canada policies, standards and guidelines related to Cyber and IT security and incident response.

Selection may be limited to members of the following Employment Equity groups: Aboriginal persons, persons with disabilities, visible minorities, women

Information on employment equity

Conditions of employment

► Security Clearance – Secret
► Willing and able to work overtime on short notice and regular 24/7 standby rotations.
► Willing and able to travel if required.
► Willing and able to attend and complete training as assigned.

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

The hiring organization will accept applications on-line only. All job applications must therefore be submitted through the Public Service Resourcing System. To submit an application on-line, please select the button “Apply Online” below. Persons with disabilities preventing them from applying on-line are asked to contact 1-800-645-5605.

A written examination may be administered.
An interview may be conducted.
Reference will be sought.

Persons are entitled to participate in the appointment process in the official language of their choice. Applicants are asked to indicate their preferred official language in their application.

For this selection process, it is our intention to communicate with candidates via email for screening and assessment purposes. This will include communication of screening results and invitations to written tests and interviews. To that end, candidates must include a valid email address in their application. It is the candidate’s responsibility to ensure that this address is functional and that it accepts messages from unknown users (some email systems block these types of email). It is also the candidate’s responsibility to ensure accurate information is provided and updated as required.

Candidates should be prepared to provide proof of education (copy of degree/diploma) and citizenship or permanent resident status.

If you have obtained education outside Canada, you will be required to submit proof of evaluation of Canadian equivalency. Candidates with foreign credentials must provide proof of Canadian equivalency. Consult the Canadian Information Centre for International Credentials for further information at http://www.cicic.ca/.

Candidates from outside the public service may be required to pay for travel costs associated with this selection process.

Preference

Preference will be given to veterans and to Canadian citizens, in that order, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.