Senior IT Cyber Security Consultant (7+ years of experience) to perform enterprise cybersecurity risk assessments and penetration testing using SIEM, NGFW, and Kali- 07278

Our public sector client is seeking a Senior IT Cyber Security Consultant (7+ years of experience) to perform enterprise cybersecurity risk assessments and penetration testing using SIEM, NGFW, and Kali-

This role supports the protection of critical information infrastructure within a large-scale utility environment. The position focuses primarily on enterprise and project cybersecurity risk assessments, stakeholder engagement, and risk-based decision support, with secondary responsibilities related to penetration testing and security testing activities. The consultant will contribute to compliance sustainment, incident response support, and the improvement of cybersecurity controls and standards across the organization. Remote candidates are accepted for this engagement.

12 month contract, Remote across Canada working PST.

** Please note that the successful candidate will be required to provide and use their own laptop for the duration of the contract.

Must Haves

• 7+ years in Information Technology with 5+ years in cyber security
• Enterprise cybersecurity risk assessments and communication of cyber risks to stakeholders
• Penetration testing and security testing using Kali and Burpsuite
• SIEM , NGFW, IAM, PKI, DLP, vulnerability scanning, and intrusion prevention/detection technologies
• Bachelor’s degree or technical diploma in Computer Science, Information Security, or equivalent

Nice to Have

• Certification in CISSP, CRISC, CISA, CISM, GCIH, or GPEN
• ISO /2, NIST, BC FIPPA, NERC CIP, or COBIT standards exposure
• Active Directory, log management, configuration management, and continuous monitoring
• Security clearance eligibility for a Security Sensitive Position classification

Responsibilities

• Identify cyber security risks and incidents through vulnerability assessments and security log monitoring
• Analyze security test results and recommend remediation options for identified risks
• Create incident reports and support security incident response activities
• Assist business groups with security requirements, design, testing, and implementation support
• Conduct compliance impact assessments for IT projects and support cybersecurity policy adherence
• Develop and implement threat detection analytics and review existing security controls
• Collaborate with SMEs and service providers to support CIP compliance activities and audit preparation