Penetration Testing Analyst

Company: Our Client
Location: Regina, Saskatchewan (100% onsite)
Engagement Period: March 18, 2026, for two (2) years, with an option to extend for up to one (1) additional year
Working Hours: Standard business hours, Monday to Friday, onsite

The organization is seeking one (1) or more Penetration Testing Analyst(s) to support its Cyber Security and Risk Management Branch (CSRM). This role will contribute to security testing, vulnerability identification, and ongoing enhancement of cybersecurity maturity. Candidates must meet the following requirements:

Requirements:

• Strong foundation in cybersecurity principles and methodologies
• Demonstrated expertise in penetration testing, vulnerability assessment, and exploit development
• Hands‑on experience with industry‑standard testing tools and frameworks
• Understanding of network protocols, operating systems, and secure coding practices
• Ability to analyze and interpret security policies and standards
• Strong written communication skills for producing detailed security assessment reports
• Effective communication and knowledge‑transfer abilities

Responsibilities:

The successful candidate(s) will be responsible for:

• Conducting internal and external penetration testing on networks and applications
• Performing vulnerability assessments to identify and validate security weaknesses
• Assessing physical security, where required
• Conducting security audits, if assigned
• Analyzing and evaluating security policies, standards, and technical controls
• Providing knowledge transfer to team members
• Preparing detailed security assessment reports documenting findings and recommendations

Background:

The Cyber Security and Risk Management Branch oversees all aspects of IT security, including policy enforcement, education and awareness, incident response, threat and risk assessments, and evaluation of emerging threats and vulnerabilities.

The Penetration Testing Analyst plays a key role within the organization’s Cybersecurity Maturity Program by conducting security testing and validating resilience across systems, processes, and infrastructure.

Additional Requirements:

• This is a 100% onsite role located in Regina, Saskatchewan
• Must comply with all organizational cybersecurity and confidentiality policies
• May require security screening per organizational standards