RQ00394 - Security Specialist - Penetration Testing - Senior
About the role
Job Title RQ00394 - Security Specialist - Penetration Testing - Senior Start Date 2025-10-13 Client Supply Ontario End Date 2026-03-31 Work Location: 777 Memorial Ave, Orillia, ON, Canada #Business Days: 117.00 Job Type Hybrid Hours Per Day Or Week 7.25 hours per day (5 Days) Must Haves
- 10+ years’ experience network threat hunting
- 10+ years’ experience red team tactics and techniques
- 10+ years’ experience network and application security
Description Responsibilities:
- Red team exercises, threat hunting, network vulnerability assessments, conducts penetration tests, vulnerability assessments, code reviews related to the OPP and OPS province wide I&IT infrastructure, applications and information resources.
- Defines, evaluates, and assesses security requirements and safeguards for systems environments and IT projects.
- Ensures the incorporation of IT security and contingency measures in the development and secure deployment of systems.
- Advises on the identification, analysis, and resolution of specific security factors, risks, vulnerabilities; protection of personal privacy issues; and appropriate industry and international security standards.
- Carry out information and information technology (I&IT) security projects and tasks in the Ontario Provincial Police as assigned by the OPP Chief Security Office and/or cluster I&IT management.
General Skills
- Strong understanding and expertise in security architecture, application and network security testing.
- Experience in vulnerability assessment/penetration testing of web applications by identifying, analyzing and exploiting common vulnerabilities contained in web applications by using manual techniques and automated tools appropriate for enterprise use.
- Experience with vulnerability assessment methodologies, tools and techniques used to conduct network vulnerability assessments, threat hunting, red team exercises and penetration testing.
- Knowledge of techniques to secure information assets and the planning, design, and implementation of security technologies, safeguards and controls.
- Proven techniques to discover gaps or weaknesses in security architecture to identify and mitigate known security threats, bugs, vulnerabilities and/or inherent weaknesses.
- Knowledge and understanding of relevant legislation and corporate directives related to the security and confidentiality of information (e.g. Freedom of Information and Protection of Privacy Act) in order to identify and assess areas of concern and risk.
- Solid knowledge of current security and contingency technology and techniques (e.g. digital signature, encryption, access controls, firewalls, authentication, virus protection, etc. ); and a proven working knowledge of security audit procedures and protocols.
- Experience in establishing secure environments at a network, operating system or application level.
- Experience with implementing security on complex and distributed systems in a high sensitive, law enforcement environment.
- Experience in writing reports, documenting risks and making recommendations for a diverse audience including executive/non-technical management level and technical resources.
- Awareness of emerging IT trends and directions, especially as related to security, privacy and compliance in a public sector environment.
- Excellent analytical, problem-solving, and decision-making skills; written and verbal communication skills; interpersonal and negotiation skills.
- A team player with a track record for meeting deadlines, managing competing priorities and client relationship management experience.
Desirable Skills
- Experience with multiple operating systems (such as Windows and Linux), multiple programming languages (such as.NET and Java), multiple architecture, development methodologies, and common network services and protocols.
- Experience in Penetration Testing, Red Team Exercises and Threat Hunting methods along with hands on experience with relevant tools, tactics, techniques and procedures.
- Knowledge and understanding of Information Management principles, concepts, tactics, techniques and procedures.
- Experience in Incident Response (IR), business recovery and Disaster Recovery (DR) planning.
- Experience in performing threat and risk assessment.
- Experience in Public Key Infrastructure (PKI) development and operation.
- Experience in secure design frameworks, principles and methodologies as part of systems development projects in an agile, fast paced technology driven public safety/law enforcement business operation.
- Experience in Intrusion Detection Systems (IDS), intrusion Protection Systems (IPS) and Security Information and Event Management (SIEM) systems.
- Experience in mitigation tools for malicious software.
- Experience in network monitoring, threat hunting and related tools. tactics, techniques and procedures.
- Experience in incident response and forensic investigation tools, techniques and procedures.
- Experience with source code review (DAST, SAST), log collection and analysis.
- Knowledge and understanding of Information Management principles, concepts, policies and practice
Deliverables
- Lead threat hunting and red team exercises to simulate cyber-attacks and identify vulnerabilities.
- Conduct penetration tests, code reviews, and vulnerability assessments for OPP systems and applications
- Define and assess security architecture requirements across systems and projects.
- Ensure IT security and contingency measures are integrated into system development.
- Advise on security risks, privacy concerns, and compliance with industry standards.
Notes Location: 1 days in office per week at minimum – either at GHQ (777 Memorial, Orillia) or Queens Park Detachment (56 Wellesley Street W, Toronto)
REPOST - HM feedback - not looking for candidates in incident response and technical support but rather RED TEAM tools, techniques and strategies.
Public Sector Experience: Nice to Have
Eligibility and Application Steps If you are enthusiastic about this exciting opportunity, we kindly request you to provide the following documents: hrsmss@smsoftconsulting.com
Without mandatory documents, we cannot submit a candidate.
- Updated Resume in word format (Mandatory)
- Skills Matrix and References (Mandatory)
- Expected hourly rate (Mandatory)
- Visa Status (Mandatory)
- LinkedIn ID (Mandatory)
Please only apply if you meet the qualifications mentioned above. Feel free to share with your network or tag someone who fits for this role! If you have any questions or need further clarification, feel free to call or text at (647) 408-1348.
About S M Software Solutions Inc
SMSS Inc. is the best solution company specialized in providing Information Technology and Management Consulting. We provide value for money to our clients by delivering the best quality technical services and solutions at reasonable rates. We also provide the best working environment for our staff and consultants. It is a growing IT services provider having wide array of solutions from Business Strategy Analysis to implementation and execution of Information Technology as well as management aspects of a business entity.
RQ00394 - Security Specialist - Penetration Testing - Senior
About the role
Job Title RQ00394 - Security Specialist - Penetration Testing - Senior Start Date 2025-10-13 Client Supply Ontario End Date 2026-03-31 Work Location: 777 Memorial Ave, Orillia, ON, Canada #Business Days: 117.00 Job Type Hybrid Hours Per Day Or Week 7.25 hours per day (5 Days) Must Haves
- 10+ years’ experience network threat hunting
- 10+ years’ experience red team tactics and techniques
- 10+ years’ experience network and application security
Description Responsibilities:
- Red team exercises, threat hunting, network vulnerability assessments, conducts penetration tests, vulnerability assessments, code reviews related to the OPP and OPS province wide I&IT infrastructure, applications and information resources.
- Defines, evaluates, and assesses security requirements and safeguards for systems environments and IT projects.
- Ensures the incorporation of IT security and contingency measures in the development and secure deployment of systems.
- Advises on the identification, analysis, and resolution of specific security factors, risks, vulnerabilities; protection of personal privacy issues; and appropriate industry and international security standards.
- Carry out information and information technology (I&IT) security projects and tasks in the Ontario Provincial Police as assigned by the OPP Chief Security Office and/or cluster I&IT management.
General Skills
- Strong understanding and expertise in security architecture, application and network security testing.
- Experience in vulnerability assessment/penetration testing of web applications by identifying, analyzing and exploiting common vulnerabilities contained in web applications by using manual techniques and automated tools appropriate for enterprise use.
- Experience with vulnerability assessment methodologies, tools and techniques used to conduct network vulnerability assessments, threat hunting, red team exercises and penetration testing.
- Knowledge of techniques to secure information assets and the planning, design, and implementation of security technologies, safeguards and controls.
- Proven techniques to discover gaps or weaknesses in security architecture to identify and mitigate known security threats, bugs, vulnerabilities and/or inherent weaknesses.
- Knowledge and understanding of relevant legislation and corporate directives related to the security and confidentiality of information (e.g. Freedom of Information and Protection of Privacy Act) in order to identify and assess areas of concern and risk.
- Solid knowledge of current security and contingency technology and techniques (e.g. digital signature, encryption, access controls, firewalls, authentication, virus protection, etc. ); and a proven working knowledge of security audit procedures and protocols.
- Experience in establishing secure environments at a network, operating system or application level.
- Experience with implementing security on complex and distributed systems in a high sensitive, law enforcement environment.
- Experience in writing reports, documenting risks and making recommendations for a diverse audience including executive/non-technical management level and technical resources.
- Awareness of emerging IT trends and directions, especially as related to security, privacy and compliance in a public sector environment.
- Excellent analytical, problem-solving, and decision-making skills; written and verbal communication skills; interpersonal and negotiation skills.
- A team player with a track record for meeting deadlines, managing competing priorities and client relationship management experience.
Desirable Skills
- Experience with multiple operating systems (such as Windows and Linux), multiple programming languages (such as.NET and Java), multiple architecture, development methodologies, and common network services and protocols.
- Experience in Penetration Testing, Red Team Exercises and Threat Hunting methods along with hands on experience with relevant tools, tactics, techniques and procedures.
- Knowledge and understanding of Information Management principles, concepts, tactics, techniques and procedures.
- Experience in Incident Response (IR), business recovery and Disaster Recovery (DR) planning.
- Experience in performing threat and risk assessment.
- Experience in Public Key Infrastructure (PKI) development and operation.
- Experience in secure design frameworks, principles and methodologies as part of systems development projects in an agile, fast paced technology driven public safety/law enforcement business operation.
- Experience in Intrusion Detection Systems (IDS), intrusion Protection Systems (IPS) and Security Information and Event Management (SIEM) systems.
- Experience in mitigation tools for malicious software.
- Experience in network monitoring, threat hunting and related tools. tactics, techniques and procedures.
- Experience in incident response and forensic investigation tools, techniques and procedures.
- Experience with source code review (DAST, SAST), log collection and analysis.
- Knowledge and understanding of Information Management principles, concepts, policies and practice
Deliverables
- Lead threat hunting and red team exercises to simulate cyber-attacks and identify vulnerabilities.
- Conduct penetration tests, code reviews, and vulnerability assessments for OPP systems and applications
- Define and assess security architecture requirements across systems and projects.
- Ensure IT security and contingency measures are integrated into system development.
- Advise on security risks, privacy concerns, and compliance with industry standards.
Notes Location: 1 days in office per week at minimum – either at GHQ (777 Memorial, Orillia) or Queens Park Detachment (56 Wellesley Street W, Toronto)
REPOST - HM feedback - not looking for candidates in incident response and technical support but rather RED TEAM tools, techniques and strategies.
Public Sector Experience: Nice to Have
Eligibility and Application Steps If you are enthusiastic about this exciting opportunity, we kindly request you to provide the following documents: hrsmss@smsoftconsulting.com
Without mandatory documents, we cannot submit a candidate.
- Updated Resume in word format (Mandatory)
- Skills Matrix and References (Mandatory)
- Expected hourly rate (Mandatory)
- Visa Status (Mandatory)
- LinkedIn ID (Mandatory)
Please only apply if you meet the qualifications mentioned above. Feel free to share with your network or tag someone who fits for this role! If you have any questions or need further clarification, feel free to call or text at (647) 408-1348.
About S M Software Solutions Inc
SMSS Inc. is the best solution company specialized in providing Information Technology and Management Consulting. We provide value for money to our clients by delivering the best quality technical services and solutions at reasonable rates. We also provide the best working environment for our staff and consultants. It is a growing IT services provider having wide array of solutions from Business Strategy Analysis to implementation and execution of Information Technology as well as management aspects of a business entity.