Apply to Senior Security Risk Assessment Consultant
emergiTEL is hiring a Senior Security Risk Assessment Consultant for our client in the Government industry. This is a Contract role.
Compensation: $100 - $120/hour (depending on experience and contract arrangement)
Location: Fredericton, NB (Hybrid, 2x/week)
Contract Duration: 20 working days (July 31st - August 30th, 2026) - chance of extension
Job Description
About the Opportunity
Our public sector client is seeking an experienced Senior Security Risk Assessment Consultant to lead a comprehensive Security Risk Assessment (SRA) for its Digital Trust platform. This platform supports a secure digital identity ecosystem used by citizens and government services.
Key Responsibilities
- Lead and execute a comprehensive Security Risk Assessment (SRA) across the Digital Trust platform.
- Perform application security testing aligned with OWASP ASVS Level 3 requirements.
- Conduct mobile application security assessments using OWASP MASVS standards.
- Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
- Assess authentication, authorization, identity management, API security, and cloud service security.
- Evaluate security architecture across mobile applications, cloud environments, enterprise integrations, and identity platforms.
- Identify security vulnerabilities, risks, and weaknesses, and provide remediation recommendations.
- Prepare formal Security Risk Assessment reports and executive-level documentation.
- Present findings to technical teams and stakeholders and participate in project meetings.
Technology Environment
Identity & Authentication
- Ping Identity
- PingOne Verify
- PingOne DaVinci
- PingOne Credentials
- Microsoft Entra ID
Mobile Technologies
- iOS
- Android
- Mobile identity applications
Cloud & Integration
- Cloud storage services
- REST APIs
- BizTalk integrations
Enterprise Applications
- Granicus AMANDA
- Citizen Portal
- Government Digital Trust Platform
Security Frameworks
- OWASP ASVS
- OWASP MASVS
- Security Risk Assessments
- Application Security Testing
- Mobile Security Testing
- Penetration Testing
Required Qualifications
- Minimum 5 years of experience conducting Security Risk Assessments (SRA).
- Strong experience performing enterprise application security assessments.
- Hands-on experience with OWASP ASVS and/or OWASP MASVS.
- Experience conducting:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Authentication and authorization testing
- Experience assessing identity and authentication platforms such as Ping Identity, Okta, Microsoft Entra ID, ForgeRock, or Auth0.
- Experience creating formal security assessment reports and risk documentation.
- Excellent written and verbal communication skills in English.
Preferred Qualifications
- Experience conducting Security Risk Assessments within provincial, federal, or municipal government environments.
- Familiarity with Service New Brunswick (SNB) security assessment processes.
- Experience delivering security assessments in highly regulated sectors such as government, financial services, healthcare, or insurance.
- Experience with cloud security architecture in Azure, AWS, or GCP.
- Mobile application penetration testing experience.
- Experience assessing API security and enterprise integration architectures.
- Knowledge of identity proofing, credential lifecycle management, and verifiable credentials.
- Relevant certifications such as:
- CISSP
- CCSP
- OSCP
- GWAPT
- GWEB
- Azure Security Engineer
- AWS Security Specialty
Vacancy Status
This is an active position currently open for hiring.
Use of Artificial Intelligence
No artificial intelligence (AI) is used in the screening or selection process. All applications are reviewed by our recruitment team.
Equal Opportunity
emergiTEL is committed to creating a diverse and inclusive workplace. We welcome applications from all qualified individuals regardless of background. Hiring decisions are based solely on skills, experience, and qualifications relevant to the role.