Help defend Ontario's digital landscape!Join a team dedicated to safeguarding the Ontario government, public services, and citizens against evolving cyber threats. As a Senior Cyber Security Specialist, you will apply your expertise in red teaming, penetration testing, and vulnerability assessments in a high-profile environment that values precision and innovation. With a balance of technical expertise and strategic thinking, you'll play a key role in strengthening cyber defences while working alongside a highly skilled group of professionals within the Cyber Security Division.
About the job
As part of our team, you will:
• run and assist with red team exercises, penetration tests, web application and network vulnerability assessments for environments and applications within the OPS province-wide I&IT infrastructure and information resources.
• prepare formal assessment reports, briefing notes, memos, and summaries for senior management.
• provide technical expertise, training, and advisory services on vulnerability management and information systems security.
• foster collaboration by developing and maintaining consultative processes with division colleagues to strengthen cybersecurity practices.
What you bring to the team
Cyber security expertise
You have:
• experience identifying, analyzing, and exploiting common web application vulnerabilities using both manual techniques and automated enterprise tools.
• experience in reading and writing exploit code in several different programming languages.
• expertise in vulnerability assessment methodologies, tools, and techniques for conducting network vulnerability assessments and penetration testing.
• proven ability to lead vulnerability assessments in large, diverse environments.
• knowledge of common attacks, web application vulnerabilities, exploits, and best practices for remediation.
• knowledge of IT security methodologies, tools, techniques, security design and architecture, threat/risk concepts and practices, and encryption technologies.
• the ability to acquire knowledge of, and interpret corporate I&IT security strategy, programs, the government's trust model, and privacy legislation.
Technical expertise
You can:
• work with a variety of operating systems, programming and scripting languages, platforms, and both common and obscure network services and protocols.
• stay informed on emerging I&IT trends, best practices, and developments in common attacks, web application vulnerabilities, exploits, and remediation strategies.
Analytical and problem-solving skills
You can:
• develop innovative solutions when existing guidelines or policies do not fully address new and emerging I&IT trends.
• conceptualize, interpret, and evaluate security exposures across multiple domains.
Communication and relationship-building skills
You can:
• effectively engage in discussions, negotiations, and advisory interactions through clear communication.
• write reports tailored for both the executive/non-technical management and technical analyst audiences.
• provide training on the use of commercial security assessment tools and scanners.
• build and maintain working relationships with internal and external stakeholders.
Leadership and project management skills
You can:
• provide leadership, advice, and strategic direction on business risk planning and coordination.
• apply project management methodologies to lead, plan, and oversee multiple concurrent projects.
Don't meet every qualification?
If you are excited about this position and meet most, but not all, of the listed qualifications, please still consider applying. We recognize that no one person might have every qualification in this job ad, and you just might be the right candidate!
How we support diversity, inclusion and accessibility
We are building an inclusive workforce that reflects the communities we serve. We encourage everyone interested in working with us to apply, including people with disabilities, Indigenous, Black and racialized individuals, as well as people from all ethnicities, cultures, sexual orientations, gender identities and gender expressions.
Our hiring process is accessible, consistent with Ontario's
Human Rights Code and the
Accessibility for Ontarians with Disabilities Act, 2005. We are working to prevent and remove barriers in our hiring processes and can offer
accommodation to address specific needs related to Code-protected grounds such as disability, family status and religion. For more information about accommodation during the hiring process please
contact us.Learn more about the work the OPS is doing to create an inclusive, anti-racist, accessible and diverse workplace:
What we offer
We are a small, innovative, and tight-knit team of cybersecurity professionals who are passionate about protecting critical systems and data across the Ontario Public Service (OPS). We specialize in offensive security, including penetration testing and red teaming, and provide expert advice to help ensure the integrity, confidentiality, and availability of government systems. You'll work with a wide range of clients and systems across the OPS, gaining insight into the breadth of programs and services that serve Ontarians every day.
The Ontario Public Service is one of Ontario's largest employers. Employees work for a wide range of ministries, with offices in more than 70 cities across the province. We offer:
• a career that can grow across ministries and job functions
• flexible learning and developmental opportunities, including education and mentorship programs
• a comprehensive compensation and benefits package
• base salary that aligns to market trends with performance-based pay and scheduled salary progression
• tailored work arrangements, including opportunities like flex hours, self-funded leave and more
• a modern, friendly and accessible physical work environment