Cyber Threat Intelligence Lead

Security is a fundamental priority with our Cyber Security Operations team within the Ontario Public Service (OPS). We are responsible in demonstrating security approach, giving direction on tasks and projects, surveying danger and vulnerabilities and ensuring the measures of proper security controls. Working to defend the OPS, its frameworks and information from cyber security assaults is our mandate.

PLEASE NOTE: Security Screening requirements are currently under review.
In a 7/24/365 environment, we are seeking a cyber-security professional who can provide leadership and subject matter expertise to a team of professionals performing cyber threat intelligence collection, analysis and the dissemination of prepared intelligence products to provide situational awareness and strategic recommendations to senior decision-makers through the delivery of timely and actionable intelligence to protect the province's information and assets against current and emerging cyber threats.

What can I expect to do in this role?

As the Cyber Threat Intelligence Lead, you will:

• Use subject matter expertise to enhance security monitoring and incident response team knowledge to support respective missions.
• Identify requirements and assist with the development and implementation of internal cyber threat intelligence training programs to ensure world class high-tech cyber security standards.
• Lead threat intelligence research and analysis on the intersection of geopolitical and security risks.
• Evaluate, analyze and synthesize multi-source information using all-source intelligence approach, satisfying a broad range of cyber threat requirements.
• Develop and maintain relationships with other threat-centric communities in the computer security and threat intelligence field to acquire and share threat intelligence information and to identify opportunities for collaboration.
• Lead teams by establishing and directing special projects, including task forces and working groups, to promote the awareness of cyber intelligence operations and the collection, tracking and identification of threat actors.

How do I qualify?

TECHNICAL KNOWLEDGE AND SKILLS:

You have demonstrated knowledge or experience with:

• Cyber security technologies, processes and practices, as well as cyber threat intelligence concepts, protocols and principles.
• Cyber intelligence analytical methodologies, tools and techniques (e.g. Kill Chain, Diamond Model, Indicators & Warnings, Probabilities Analysis, etc.) to lead the development of actionable intelligence and to categorize threat levels to prevent security issues.
• Data science and analytical techniques to aggregate, manipulate, mine and examine data from various sources in order to visualize and report on threat intelligence.
• Threat actor techniques related to reconnaissance, end-user attacks and network-based attacks, expanding foothold (pivoting), and hiding tracks

LEADERSHIP SKILLS:

• You can demonstrate leadership in providing direction and mentorship to technical and non-technical personnel within the cyber security operation environment.
• You have knowledge of project management methodology.
• You can set strategic objectives, take initiative and develop and implement guidelines, standards, policies, procedures and technical documentation for use by cyber security specialists.

INTERPERSONAL AND INFLUENCING SKILLS:

• You have relationship management skills to maintain internal and external contacts that focus on threat intelligence issues.
• You can present recommendations and provide technical advice/consultation to senior management and lead meetings.
• You have proven influencing skills to communicate intelligence-related concepts and recommendations to senior management and provide status and briefings of threat intelligence operational activities.

ANALYTICAL AND PROBLEM SOLVING SKILLS:

• You have analytical and problem solving skills to synthesize data and to present detailed intelligence briefing reports.
• You can rapidly evaluate and assess potentially imminent security situations, sensitive developments and complex threat issues.
• You can define, collect, analyze data, establish facts, draw valid conclusions and make fact-based decisions.

All external applicants (including former employees of the Ontario Public Service) applying to a competition in a ministry or Commission public body must disclose (either in the cover letter or resume) previous employment with the Ontario Public Service. Disclosure must include positions held, dates of employment and any active restrictions as applicable from being rehired by the Ontario Public Service. Active restrictions can include time and/or ministry-specific restrictions currently in force, and may preclude a former employee from being offered a position with the Ontario Public Service for a specific time period (e.g. one year), or from being offered a position with a specific ministry (either for a pre-determined time period or indefinitely). The circumstances around an employee's exit will be considered prior to an offer of employment.

Remember: The deadline to apply is Friday, August 4, 2017 11:59 pm EDT. Late applications will not be accepted.

We thank you for your interest. Only those selected for further screening or an interview will be contacted.