Senior Security Risk Assessment Consultant

emergiTEL is hiring a Senior Security Risk Assessment Consultant for our client in the Government industry. This is a Contract role.
Compensation: $100- $120/hour (depending on experience and contract arrangement)
Location: Fredericton NB (Hybrid 2x/week)
Contract Duration: 20 working days (July 31st - August 30th 2026) - chance of extension

Job Description

About the Opportunity

Our public sector client is seeking an experienced Senior Security Risk Assessment Consultant to lead a comprehensive Security Risk Assessment (SRA) for its Digital Trust platform. This platform supports a secure digital identity ecosystem used by citizens and government services.

Key Responsibilities

• Lead and execute a comprehensive Security Risk Assessment (SRA) across the Digital Trust platform.
• Perform application security testing aligned with OWASP ASVS Level 3 requirements.
• Conduct mobile application security assessments using OWASP MASVS standards.
• Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Assess authentication authorization identity management API security and cloud service security.
• Evaluate security architecture across mobile applications cloud environments enterprise integrations and identity platforms.
• Identify security vulnerabilities risks and weaknesses and provide remediation recommendations.
• Prepare formal Security Risk Assessment reports and executive-level documentation.
• Present findings to technical teams and stakeholders and participate in project meetings.

Technology Environment

Identity & Authentication

• Ping Identity
• PingOne Verify
• PingOne DaVinci
• PingOne Credentials
• Microsoft Entra ID

Mobile Technologies

• iOS
• Android
• Mobile identity applications

Cloud & Integration

• Cloud storage services
• REST APIs
• BizTalk integrations

Enterprise Applications

• Granicus AMANDA
• Citizen Portal
• Government Digital Trust Platform

Security Frameworks

• OWASP ASVS
• OWASP MASVS
• Security Risk Assessments
• Application Security Testing
• Mobile Security Testing
• Penetration Testing

Required Qualifications

• Minimum 5 years of experience conducting Security Risk Assessments (SRA).
• Strong experience performing enterprise application security assessments.
• Hands-on experience with OWASP ASVS and/or OWASP MASVS.
• Experience conducting:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Authentication and authorization testing
• Experience assessing identity and authentication platforms such as Ping Identity Okta Microsoft Entra ID ForgeRock or Auth0.
• Experience creating formal security assessment reports and risk documentation.
• Excellent written and verbal communication skills in English.

Preferred Qualifications

• Experience conducting Security Risk Assessments within provincial federal or municipal government environments.
• Familiarity with Service New Brunswick (SNB) security assessment processes.
• Experience delivering security assessments in highly regulated sectors such as government financial services healthcare or insurance.
• Experience with cloud security architecture in Azure AWS or GCP.
• Mobile application penetration testing experience.
• Experience assessing API security and enterprise integration architectures.
• Knowledge of identity proofing credential lifecycle management and verifiable credentials.
• Relevant certifications such as:
  • CISSP
  • CCSP
  • OSCP
  • GWAPT
  • GWEB
  • Azure Security Engineer
  • AWS Security Specialty

Vacancy Status
This is an active position currently open for hiring.

Use of Artificial Intelligence
No artificial intelligence (AI) is used in the screening or selection process. All applications are reviewed by our recruitment team.

Equal Opportunity
emergiTEL is committed to creating a diverse and inclusive workplace. We welcome applications from all qualified individuals regardless of background. Hiring decisions are based solely on skills experience and qualifications relevant to the role.

Required Experience:

Senior IC