University degree at the Bachelor level in Computer Science, Engineering (Computer or Software or Electrical); and

A minimum four (4) years in the last eight (8) years were fulfilling the role of IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;

OR

University degree at the Bachelor level in Science, Engineering (other than listed in a), Mathematics; and

A minimum of five (5) years in the last nine (9) years fulfilling the role of an IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;

OR

Community College Diploma in Information Technology, Computer Science, or Engineering Technology; and

A minimum four (4) years in the last eight (8) years were fulfilling the role of an IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;

OR

A minimum of eight (8) years in the last ten (10) years fulfilling the role of an IT Security Analyst as defined in at least four (4) of the mandatory experience paragraphs detailed herein;

    a.  Experience in one or more of the following: creating or
         installation and configuring, or maintaining intrusion
         detection systems (IDS). Must include analyzing related
         IDS log files for behaviour in contradiction of security policy.

    b.  Experience in creating and installing and configuring and
         maintaining Firewalls. Must also include analyzing related
         firewall log files for behaviour in contradiction to security
         policy.

    c.  Experience in one or more of the following: design or
         developing, or implementation of security frameworks
         for n-tier or web applications for UNIX or Windows
         environments.

    d.  Experience in using industry recognized ITS best practices
         to harden UNIX or Windows operating systems or
         databases (Oracle or Sybase or Gemstone or Objectivity).

    e.  Experience with analyzing networking protocols to
         determine malicious activity. Must demonstrate packet
         level analysis of two or more of the following protocols:

i. HTTP;

ii. HTTPS;

iii. FTP;

iv. TELNET;

v. UDP;

vi. DNS;

vii. SMTP.

    Must indicate how if any analysis indicated deviation
    from RFC standards.

    f.  Experience in configuration management to support
        IT security applications.