Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

The Senior Analyst, Security Testing plays an offensive security role, managing and executing the Security Testing Program to proactively identify vulnerabilities and ensure the resilience of Payments Canada’s critical financial systems. This role acts as an "ethical hacker" and simulation coordinator to pressure-test the organization's infrastructure, applications, and emerging technologies before real threat actors can exploit them.

Responsibilities

Design and execute a layered approach to testing for the Security Operations Team, including tabletop exercises, scenario-based testing, Red Team, Blue Team, and Purple team exercises to evaluate and improve detection, response, and recovery capabilities.
Engage in the development and execution of industry-wide annual exercises through the Resilience of Wholesale Payments Systems (RWPS) program to test industry response to cyber-attacks.
Manage annual holistic Penetration Tests against Payments Canada infrastructure.
Conduct discrete internal red team/blue team testing across all of Payments Canada’s corporate and payment system infrastructure environments in coordination with relevant stakeholders.
Validate the effectiveness of security operational controls at the individual and team levels.
Engage with other business leaders at Payments Canada and within industry as a Security Subject Matter Expert (SME) for planned exercises external to the Security Team.
Maintain a strong grasp of security strategy, solid security subject matter expertise, and strong interpersonal and communication skills to present recommendations in a compelling manner to all audiences, including technical staff, middle management, and partners.

Requirements

Post-secondary education, or equivalent experience in computer science, information technology, or related fields.
Minimum five (5) years’ experience in a combination of information systems and information security related roles.
Minimum of three (3) years of experience in conducting Penetration Tests.
Minimum of three (3) years of experience in Vulnerability Testing and Vulnerability Management.
Minimum of one (1) year of experience testing AI/ML applications or working with Adversarial AI frameworks (e.g., MITRE ATLAS).
Ability to identify and understand cyber threats and trends and apply security knowledge to strengthen defenses including protective, detective, and compensating controls.
Ability to employ Offensive cyber techniques.
Knowledge of exercise design and execution (with a focus on Red, Blue, and Purple Team Exercises).
Deep understanding of the OWASP Top 10 for LLMs (Large Language Models) and the MITRE ATLAS™ framework (Adversarial Threat Landscape for Artificial-Intelligence Systems).
Possesses an in-depth understanding of various testing methodologies (i.e., OWASP Web & Mobile testing methodologies, CREST, etc.).
Eligibility to obtain and maintain a Government of Canada Reliability Clearance and successfully complete enhanced background checks.

Skills

Penetration Tests
Vulnerability Testing
Vulnerability Management
AI/ML application testing
Adversarial AI frameworks
Offensive cyber techniques
Exercise design and execution
Red Team Exercises
Blue Team Exercises
Purple Team Exercises
OWASP Top 10 for LLMs
MITRE ATLAS™ framework
OWASP Web & Mobile testing methodologies
CREST
Intelligence tradecraft
Canadian Financial services or Payments industry knowledge
Bilingualism (English and French)

Location

Hybrid (remote/office)

Work Type

Hybrid
Full-time

Experience Level

Senior Analyst
Minimum five (5) years’ experience in information systems and information security
Minimum of three (3) years of experience in Penetration Tests
Minimum of three (3) years of experience in Vulnerability Testing and Vulnerability Management
Minimum of one (1) year of experience testing AI/ML applications or working with Adversarial AI frameworks

Education Level

Post-secondary education, or equivalent experience in computer science, information technology or related fields.

Salary/Compensations

$88,500 to $147,500

Benefits

Flexible, hybrid (remote/office) environment.
Competitive compensation package, including annual variable bonus and defined contribution pension plan with employer matching percentage (if eligible).
Comprehensive health and dental benefit coverage, including mental health coverage, life insurance and a health spending account for you and your dependents (Permanent and temporary employees with contracts 12 months and over).
Paid time off: minimum four weeks paid vacation, sick and personal days, December holiday shutdown and cultural holiday observance days.
26 weeks of paid maternity and parental leave top-up (if eligible).
Rewards and recognition program.
Access to office gym facilities.
Internal and external professional development opportunities.
Fun team and organizational events.
Monthly all staff forums led by our Executive Leadership Team.

About the Company

Payments Canada is at the forefront of the Canadian payment ecosystem, making payments easier, smarter, and safer for all Canadians.
We are a public purpose, non-profit organization situated at the center of Canada’s payment ecosystem.
We own and operate payment systems that process hundreds of billions of dollars’ worth of payment transactions every business day.
We convene ecosystem participants to discuss their multiple and diverse interests and ideas and to navigate industry-level challenges.
Our values are: Inspire trust, build community and enable change.
Our culture fosters authenticity, collaboration, innovation, and development.
We empower one another, make meaningful contributions that impact the organization and our country.
We develop and nurture meaningful connections that drive innovation in our ecosystem.

Equal Opportunity

We are dedicated to fair, transparent, and inclusive hiring.
We are an equal opportunity employer and value diversity at our company.
Our recruitment process uses automated tools, but not generative AI, to objectively screen and evaluate applications and confirm that a candidate’s qualifications meet job requirements.
Trained recruitment professionals and hiring managers always make the final hiring decisions.
We are committed to making everyone feel they can be themselves and thrive at work.
We will continue to build on a foundation of respect and appreciation for diversity in all forms and collectively create an inclusive and equitable culture where our differences are valued.
We are committed to employment equity and actively encourage applications from women, Aboriginal people, persons with disabilities, and visible minorities.
If selected for an interview, please advise us if you require special accommodation by emailing hrinfo@payments.ca.
Preference will be given to Canadian citizens and permanent residents.