Solution SFT

Security Engineer

• Validate business cases and advise stakeholders on their development
• Define, document, and communicate guiding principles for the design, implementation, deployment, and support of selected solutions
• Follow up with division heads of the Digital Security and Cyberdefense Directorate (DSNC) when required, according to established processes
• Plan, control, and support activities related to information security
• Develop strategies and guidance for the evolution of information technologies
• Conduct knowledge transfer to the teams of the Digital Security and Cyberdefense Directorate (DSNC) regarding work performed
• Identify governance needs and directions for information security based on business requirements
• Participate in designing and/or validating governance and information security solutions, ensuring their consistency and integration with reference standards
• Participate in orientation studies, opportunity assessments, and preliminary analyses
• Define security orientations for systems taking into account technological directions and business needs, and ensure their implementation
• Perform risk analyses
• Coordinate work
• Support the project team regarding governance, security, and strategic directions

Senior Information Security Governance Advisors

Analyst

• Serve as an information security advisor to management
• Analyze and remediate major technical deficiencies and issues related to the operation of IT security infrastructure
• Analyze cyberattacks against the Ministry, collaborate and propose solutions to counter them
• Analyze centralized security logs to detect potential issues requiring action
• Ensure the development and maintenance of expert backup resources to guarantee continuity of the Ministry's IT security services
• Define activities to resolve any security environment problems to ensure its stability and help maintain trust in information protection
• Define and implement work processes based on best practices recommended by the ITIL framework
• Operate and manage security infrastructures, particularly regarding the McAfee antivirus solution (ePO) and, more generally, intrusion detection systems (IDS), vulnerability scanners, etc.
• Track alerts and security incidents in the Ministry's request-tracking system
• Identify the impacts and stakes of not resolving IT security issues
• Identify weak areas, evaluate potential solutions, and propose necessary recommendations
• Implement and maintain IT security incident management processes
• Keep all security procedures up to date
• Produce status reports on the Ministry's IT security services
• Produce statistical reports, analyze them, and provide opinions and recommendations to management
• Produce or contribute to risk analyses related to security
• Propose targets for security improvements and produce an action plan
• Conduct studies and analyses related to the implementation of IT security technologies and apply the results of those studies to the Ministry's technological infrastructure
• Create threat models and define the attack surface of the main systems under the directorate's responsibility
• Perform application penetration tests using various dedicated tools
• Monitor and refer to publications from vulnerability monitoring organizations such as CERT/AQ
• Ensure continuous availability of security services using monitoring tools

Security Operations Analyst, Intermediate

• Secure infrastructures
• Monitor systems to detect anomalies and potential threats
• Detect security issues
• Ensure continuous access to systems
• Detect anomalies in real time
• Investigate security breaches and other cybersecurity incidents
• Perform regular penetration tests
• Identify and remediate potential vulnerabilities before they can be exploited by cybercriminals
• Identify and isolate threats before they cause damage
• Prepare solutions of varying complexity in accordance with governance and information security specifications
• Develop rapid response protocols
• Design and implement protection solutions for IT infrastructures
• Implement security strategies to prevent data breaches
• Update the IT security policy
• Diagnose and resolve technical problems of varying complexity

Senior Cybersecurity Analyst

• Familiarize yourself with the system architecture, deployment and testing strategies, and the delivery schedule.
• Participate in kickoff meetings for each delivery and in other project meetings.
• Consult users to precisely define operational needs related to the functional requirement documents.
• Identify possible solutions with the IT team and draft a summary of the solutions and their impacts.
• Present the solution summaries and their impacts to users and the team — ensure overall consistency.
• Validate the functional requirement documents and complete quality assurance forms for all cycles.
• Ensure the development team adheres to the directions provided by users.
• Develop business processes to represent the implemented solutions (BPMN standard).
• Act as Product Owner (PO) or assistant PO as required — write and prioritize stories in the backlog.
• Produce the test strategy and draft the test specifications for acceptance testing.
• Execute acceptance tests, track defects, and produce periodic progress reports.
• Write the test summary and any other required documentation.

Process and Control Analyst

• Perform functional analysis
• Write or review functional specifications
• Write or review the operations manual
• Perform programming and unit testing
• Perform functional and integration testing
• Deploy the system to production
• Write the user guide

Analyst Programmer, Oracle Forms

• Conduct functional analysis
• Draft or revise functional specification documents
• Draft or revise the operations manual
• Perform programming and unit testing
• Perform functional and integration testing
• Deploy the system to production
• Draft the user guide

Analyst Programmer, MS-Access, VBA

Project Manager

• The expert consultant will serve as a project management expert and provide specialized support to the Project Management Expertise Unit (UE) and STQ project managers.
• Be named specifically in the submitted proposal.
• Contribute to project structuring, analysis, and project support.
• Support the application of methodological practices and governance standards.
• Support the preparation of decision documents, analyses, tools and required deliverables.
• Act as the primary point of contact between the PS and STQ.
• Work autonomously while respecting STQ's directions, processes and methodological standards.
• Fluency in French, both spoken and written.

Project Management Consultant

Counselor

• Develop various strategies (e.g., change management and implementation of training programs).
• Design or develop pedagogical strategies and tools that promote skills development and provide advisory support in defining skills development objectives.
• Recommend tools, methods and practices for developing training products.
• Support the instructional design and pedagogical development of professional training content, in accordance with a competency-based approach.
• Provide expertise on aspects related to adult skills development in the workplace.
• Participate in needs analysis and in designing activities, products and training programs.
• Support subject-matter experts in drafting pedagogical tools such as instructional briefs, facilitator guides, storyboards, course outlines, etc.
• Contribute to developing evaluation and follow-up activities for training to ensure stakeholder satisfaction and maximize the investment.
• Support the integration of content into various delivery platforms/tools.
• Advise on implementing a competency assessment system to identify areas where employees require additional training.
• Ensure knowledge transfer to resources designated by the CNESST.
• Perform other duties typical of a pedagogical advisor.