Position Title : Penetration Testing Analyst
Contract Duration : Initial Term : 2 Years + Optional Extension : Up to 1 Year
Work Location : 100% Onsite – Regina, Saskatchewan (No Remote / No Hybrid)
Client is seeking qualified Penetration Testing Analyst resources to support cybersecurity programs through security assessments, vulnerability testing, penetration testing, and IT security risk management across government systems, applications, and network environments. This role requires real professional penetration testing experience (training / academic experience will not be considered) and the ability to work 100% onsite in Regina.
Key Responsibilities
- Conducting penetration testing on government applications, systems, and networks
- Identifying, validating, and safely exploiting security vulnerabilities
- Performing static application security testing (SAST) and dynamic application security testing (DAST)
- Executing manual testing and automated scanning as per approved methods
- Performing white-box testing and black-box testing
- Conducting cloud security testing, including cloud-based application architecture and deployment models
- Evaluating vulnerabilities and mapping them to risk impacts
- Creating and delivering detailed penetration test / assessment reports
- Presenting findings to technical teams and stakeholders with remediation recommendations
- Supporting broader government cybersecurity and security governance initiatives
Standards & Frameworks
OWASP (especially OWASP Application Security Testing Standard)ISO 27002 : 2022 (or equivalent information security controls)Regulatory compliance standards and ensuring compliance during penetration testingRequired Qualifications
Mandatory
Demonstrated professional experience as a Penetration Tester / Penetration Testing Analyst
Must be real job experienceAcademic projects / training / lab-only experience does NOT qualifyStrong experience identifying, exploiting, and documenting vulnerabilities across :
Web applicationsInfrastructure and networksCloud environmentsDemonstrated ability to write and present detailed security assessment reportsDeep understanding of :
Common attack vectors and techniquesDefense approaches / mitigation strategiesNice to Have (Assets)
Valid cybersecurity certifications such as :
CEH (Certified Ethical Hacker)CISSP (Certified Information Systems Security Professional)Other relevant cybersecurity certificationsTechnical Skills Required
Burp SuiteNessus / TenableNmapMetasploitOWASP ZAPSQLmapKali LinuxWiresharkHydra / password testing toolsCloud security tools (AWS / Azure / GCP security tooling – where applicable)Local Knowledge Requirement
Government / public sector entities / large enterprise environments
#J-18808-Ljbffr