We are looking for an Information Technology Security Vulnerability Analysis Specialist – Level 2 for Public Works and Government Services Canada with a Security Clearance Level of Secret.

The proposed resource must meet the ff:

1. The Contractor must clearly demonstrate that the Proposed Resource has a minimum of three (3) years experience in the last five (5) years, prior to the RFP posting date, conducting Cyber Security vulnerability scans and security testing.
2. The Contractor must clearly demonstrate that the Proposed Resource has experience in the past three
   (3) years, prior to the RFP posting date, performing vulnerability scans and security testing for a secure Public Cloud computing environment, service, or solution for a public sector organization including all of the following activities:

   • Conducting an assessment of the assets and data involved;
   • Conducting thorough vulnerability scans and security testing to identify vulnerabilities that may leave the organization or data open to threats or theft;
   • Using automated vulnerability assessment tools;
   • Producing an actionable and prioritized list of deficiencies with explanations and technical recommendations.

   To qualify, a project must contain all activities.

3. The Contractor must clearly demonstrate that the Proposed Resource has a minimum of three (3) years experience in the last five (5) years, prior to the RFP posting date, in both:

   • Creating effective executive summaries of automated vulnerability assessment scan reports, and providing detailed analysis and remediation plans for vulnerabilities discovered during tests
   • Conduct vulnerability assessment tests employing a variety of acceptable* automated and manual testing tools and techniques.

   * “Acceptable” means tools and techniques applicable to testing specifically for software vulnerabilities versus the usual network vulnerabilities.

4. The Bidder must demonstrate that the proposed resource possesses one (1) or more current professional certifications from any of the following:

   • CompTIA PenTest+
   • Certified Vulnerability Assessor (CVA)
   • EC Council Certified Ethical Hacker (CEH)
   • EC Council Certified Penetration Testing Professional (CPENT)
   • GIAC Certified Penetration Tester (GPEN)
   • Certified Penetration Tester (CPT)
   • Offensive Security OSCP, OSWE, OSEP
   • eLearn Security INE eCPPTv2, eCPTX, eWPTXv2

   The Bidder should provide a readable copy of the Certification with its bid.