Cyber Security Technical Advisor

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

This process is being advertised to attract Cyber Security professionals that can contribute to the evolution of the Cyber Security function.

When you apply to this selection process, your candidature will be considered for many Cybersecurity disciplines within the organization. Whether you are currently working in the private or public sector, there are useful tools that can assist you. You can access them here: https://www.canada.ca/en/shared-services/corporate/careers.html.

Shared Services Canada (SSC) is committed to creating a workplace that is respectful of Canada’s two official languages. The staffing of bilingual positions, with respect to supervision and the provision of common and central services, is the norm in regions designated bilingual for language-of-work purposes. SSC must ensure that it has adequate bilingual capacity to implement its mandate, while respecting the language rights of its employees and those of client departments across the country. Language training is offered to SSC employees who would like to acquire or improve skills in the other official language for developmental or career advancement purposes.

Give yourself the best chance to succeed! As the objective of this process is to assess qualifications needed for the position(s) to be staffed, let us know if you have a functional limitation/ disability, which may affect your performance. For example, contact us if you need assistance in completing and submitting your application. Should you then proceed to the next assessment stage, such as an exam or interview, we will send you an e-mail with additional information on the assessment format so that you can determine if you may require an accommodation (such as a different test format, an adaptive technology, or additional time). Assessment accommodations are designed to remove obstacles without altering the criteria being assessed to allow candidates with functional limitations to fully demonstrate their abilities.

You may also review jobs open to the public through INFOTEL at 1-800-645-5605. The INFOTEL number for persons using a TTY/TDD is 1-800-532-9397.

Are you a Royal Canadian Mounted Police (RCMP) civilian member currently assigned to SSC? If so, we encourage you to apply! As per the memorandum of understanding with the RCMP, please note that members assigned to SSC since December 1 2018 who accept an appointment from this process will not be required to convert to public servant status. All other members who apply, including those working with SSC through an Interchange Canada agreement, will need to convert to public servant status upon appointment. If you have questions, please send an email message to the address indicated in the Contact information section below for more information.

SSC welcomes applications from eligible Veterans and Canadian Armed Forces (CAF) members. We recognize your contribution to Canada and would like to offer you the opportunity to continue your career in an environment where multi-talented employees with diverse skills are appreciated and supported.

Work environment

Shared Services Canada (SSC) is modernizing how the Government of Canada manages its information technology (IT) infrastructure. The Department is mandated to deliver email, data centre and telecommunication services, including videoconferencing and Wi-Fi, to partner organizations.

At SSC, we are building an environment that doesn't just have jobs, but valuable long-term careers. We provide a supportive and collaborative workplace with flexible work arrangements. We promote a positive work-life balance with a commitment to workplace wellness.

SSC is dedicated to building and promoting a diverse, equitable and inclusive workforce, representative of Canadian society. All candidates who believe they are qualified are encouraged to apply, including Black, other racialized and Indigenous peoples, women, persons with disabilities and persons of the 2SLGBTQI+ community.

SSC has several networks within its Diversity community that promote equality in the workplace and help build a culture of mutual respect. The Diversity community explores ways to increase employee engagement on issues that affect the equity seeking groups. The following networks provide members with a safe place to connect, discuss common issues, exchange information and voice concerns:
- Indigenous Circle
- Black Employees Network
- Persons with Disabilities Network
- Pride Network
- Visible Minorities Network
- Women’s Network

Intent of the process

This process may be used to staff similar positions within Shared Services Canada in various locations across Canada.

Positions to be filled: Number to be determined

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

EDUCATION
Graduation from a two-year program of study from a recognized post-secondary institution with acceptable specialization in computer science, information technology, information management or another specialty relevant to the position to be staffed or an acceptable combination of education, training and/or experience.

Notes :
- Indeterminate incumbents in the IT group on December 9, 2021 who do not possess the education prescribed above, are deemed to meet the minimum education standard based on their education, training and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the IT group.
- Indeterminate incumbents of positions in the CS group on May 10, 1999, who do not possess the education prescribed above, are deemed to meet the minimum education standard based on their education, training and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the IT group.

Degree equivalency

EXPERIENCES
EX1. Significant** experience providing cyber security technical advice in one or more of the following areas:
1. Cyber Incident Response
2. Proactive monitoring
3. Identifying, evaluating, treating, and reporting on security vulnerabilities
4. Cloud Computing (Azure, AWS, etc.)
5. Security Device Management
6. Threat Intelligence Analysis
7. Safeguarding networks using detection, pattern analysis, threat recognition and mitigations
8. Penetration Testing / Red-Teaming / Blue-Teaming
9. Risk Assessment
10. Public Key Infrastructure

EX2. Recent* and significant** experience developing and delivering presentations to technical and non-technical audiences.
EX3. Recent* and significant** experience analyzing cyber security vulnerabilities, events or incidents and recommending corrective actions.

Definitions:
- Recent* is defined as experience normally acquired within the last five (5) years.
- Significant** is understood to mean the depth and breadth of experience normally acquired by performing a broad range of various related activities over a period of approximately two (2) years. This is cumulative and means that you do not need two years in any one area but rather a total of two years experience even if shorter for one or more area.

The following will be applied / assessed at a later date (essential for the job)

Various language requirements
Bilingual imperative CBC/CBC
Bilingual Imperative BBB/BBB
English Essential

Information on language requirements

KNOWLEDGE
K1. Knowledge of current industry trends or best practices that affect the management of cyber security.

COMPETENCIES
C1. Influence
C2. Analytical thinking
C3. Creative thinking
C4. Client focus
C5. Teamwork
C6. Communication – Writing and Oral

The following may be applied / assessed at a later date (may be needed for the job)

ASSET QUALIFICATIONS
(Note to candidates). Asset qualifications do not have to be met by all applicants and do not apply to all positions. Depending on the position being staffed, one or more of the asset qualifications below may be used to better align candidates and operational requirements. Candidates will have the opportunity to elaborate on those they meet if selected to advance in the process. For now, you only have to answer yes or no for each of the qualifications.

OCCUPATIONAL CERTIFICATIONS
- (ITIL) Information Technology Infrastructure Library Certification (v3)
- (CISSP) Certified Information Systems Security Professional
- (CSE) Successful completion of any Communications Security Establishment IT Security course
- (CCSP) Certified Cloud Security Professional or CCSK Certificate of Cloud Security Knowledge
- (OSCP / OSCE) Offensive Security Certified Professional and/or Offensive Security Certified Expert
- PRINCE 2 certification
- PMP certification
- (CRTOP) Certified Red Team Operations Professional
- (CEH) Certified Ethical Hacker
- (GCIH) GIAC Certified Incident Handler
- Other related security certification

EXPERIENCES
AEX1. Experience designing or implementing cyber security strategies.
AEX2. Experience working in or contributing towards cyber security operations and/or recent experience working in a cyber security operations centre.
AEX3. Experience installing, configuring, tuning, monitoring, operating, and supporting security tools and services such as Firewalls, IPS/IDS (SIEM) or other related Cyber/IT security services.
AEX4. Experience assessing or deploying security controls, such as tools and software applications with the objective of protecting IM/IT infrastructure from harmful incidents and malicious attacks.
AEX5. Experience in Attack Surface Management or Threat Hunting.
AEX6. Experience applying current industry trends or best practices that affect the management of Cybersecurity.
AEX7. Experience reviewing, implementing, updating or documenting cyber security policies, standards or procedures.
AEX8. Experience in ensuring compliance with Cyber Security Policies, directives, standards, recommendations, or guidelines such as the TBS Policy on Government Security, IT Security Risk Management: A Lifecycle Approach (ITSG-33), SA&A, guidance from the Canadian Centre for Cyber Security, Government of Canada Cloud Adoption Strategy, Cyber Operations, Security Analysis, Technical Audit, etc.

OPERATIONAL REQUIREMENT
- Able to work overtime on short notice.

Conditions of employment

Secret security clearance

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

The Government of Canada Workplace Accessibility Passport helps federal public service employees get the tools, supports and measures they need to perform at their best and succeed in the workplace. It is a tool that allows employees to document their workplace barriers and accommodation needs. It promotes collaboration between an employee and their manager to address barriers and implement the solutions needed to ensure that employees are equipped to succeed on the job, no matter where their duties are performed. SSC is proud to be one of the first in government to offer the Accessibility Passport to its employees.

More Information on Self-Declaring
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
You can self-declare if you are a member of one or more of these 4 designated employment equity groups: women, Indigenous (Aboriginal) peoples, persons with disabilities and members of visible minorities, as identified by the Employment Equity Act.

Why self-declare:
• It gives employment equity group members access to tailored programs, mentorships and networks
• It helps build a public service that represents Canada’s diversity
• It allows the public service to identify and eliminate barriers to hiring members of employment equity groups, by measuring their success rates at each step of the hiring process

📢 How to self-declare : If you belong to an employment equity group, you can self-declare when you apply for a job through GC Jobs by completing the Employment Equity section under Requirements

______________________________________________________________________

WHEN YOU APPLY - Focus on screening questions and on your résumé.
Screening questions and your résumé will be the first pieces of information we’ll see about you, so be sure to highlight your achievements, and be clear about your experience and your education.

↪ Be specific about roles you've occupied and/or projects you’ve worked on.
↪ If you've had roles related to this position, tell us about it.
↪ Your evaluation will begin the moment you apply to the process.
▻ You must meet all essential qualifications in order to be appointed to the position.

📢 Candidates must clearly demonstrate in the screening questionnaire HOW they meet the education and experience criteria listed in the Essential Qualifications. Please note that stating that the requirement has been met, and/or listing past or current responsibilities does not represent adequate substantiation. You must provide CONCRETE EXAMPLES that clearly illustrate how you meet the requirement (how, when and where).

📢 Résumés may be used as a secondary source to validate the merit criteria, although comments such as "refer to my attached résumé" will not be accepted and may result in your application being rejected.

The main steps in this process are as follows:
1. Submission of your application.
2. Preselection of candidates based on essential experiences and education.
3. A self-assessment of competencies and an opportunity to elaborate on asset qualifications will be administered to the candidates selected to proceed.
3. Invitation to a virtual interview which will assess some essential knowledge and competencies (you will also need to present your proof of education) for candidates that pass the self-assessment with possible volume management strategies (various) being used if necessary.
4. Candidates will be notified of their status in the process (successful or not).
5. If a hiring manager considers a qualified candidate, his or her references could be verified and aligned with validation exercises.

Preference

Preference will be given to veterans first and then to Canadian citizens and permanent residents, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.