Intermediate (secret cleared) Incident Response/Management consultant to support ongoing initiatives related to the department's security policies and directives

Our valued public sector client is looking for an intermediate (secret cleared) Incident Response/Management consultant to support ongoing initiatives related to the department's security policies and directives.

Tasks include:

• Review, analyze, and/or apply
  • Reporting and resolution procedures for IT Security incidents (for example DOS attacks) and International IT Security incident advisory services
  • Networking Protocols such as HTTP, FTP, Telnet
  • Internet security protocols such as SSL, S-HTTP, S-MIME, IPSec, SSH
  • TCP/IP, UDP, DNS, SMTP, SNMP
  • Intrusion detection systems, firewalls, content checkers and antivirus software
  • Network infrastructure components, such as multiplexers, routers/hubs, switches
• Provide incident analysis support, including:
  • Response mechanisms
  • Co-ordination of all prevention and response plans
  • Emergency Operations Centre (EOC) activities
  • Co-ordination with the national Integrated Threat Assessment Centre and Government Operations Centre
  • Participation in the Integrated National Security Framework and National Cyber Security Strategy
• Collect, collate, analyze and disseminate public domain information related to networked computer threats and vulnerabilities, security incidents and incident responses
• Conduct on-site reviews and analysis of system security logs
• Produce system activity reports, logs and incident analysis
• Assist in managing and running an incident response center
• Complete tasks directly supporting the departmental IT Security and Cyber Protection Program
• Develop and deliver training material relevant to the resource category
• Specific tasks will be identified in each validly issued TA

Must have:

• Secret clearance
• 3 years experience as an Incident Management Specialist
• University degree or College diploma in a relevant IT, Computer Science, or Electrical Engineering field (or equivilent)

Nice to have:

• A certification relevant to cyber security