University degree at the Bachelor level in Computer Science, Engineering (Computer, Software, Electrical); and

A minimum two (2) years in the last eight (8) years were fulfilling the role of IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;

OR

University degree at the Bachelor level in Science, Engineering (other than listed in a), Mathematics; and

A minimum of three (3) years in the last eight (8) years fulfilling the role of an IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;

OR

Community College Diploma in Information Technology, Computer Science, or Engineering Technology; and

A minimum three (3) years in the last eight (8) years were fulfilling the role of an IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;

OR

A minimum of six (6) years in the last ten (10) years fulfilling the role of an IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;
 

    a.  Experience in one or more of the following: creating or
         installation and configuring, or maintaining intrusion
         detection systems (IDS). Must include analyzing related
         IDS log files for behaviour in contradiction of security policy.

    b.  Experience in creating and installing and configuring and
         maintaining Firewalls. Must also include analyzing related
         firewall log files for behaviour in contradiction to security
         policy.

    c.  Experience in one or more of the following: design or
         developing, or implementation of security frameworks for
         n-tier or web applications for UNIX or Windows
         environments.

    d.  Experience in using industry recognized ITS best practices
         to harden UNIX or Windows Operating Systems or one of
         the following database products: Oracle or Sybase or
         Objectivity.

    e.  Experience with analyzing networking protocols to
        determine malicious activity. Must demonstrate packet
        level analysis of two or more of the following protocols:

i.   HTTP;

ii.  HTTPS;

iii. FTP;

iv. TELNET;

v.  UDP;

vi.  DNS;

vii. SMTP.

    Must indicate how if any analysis indicated deviation
    from RFC standards.