Security Analyst - Pentest (2+ years of experience)
- Montreal, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- 2-3 years of relevant experience.
- Posting language
- English
- Posted
Original job description
GoSecure is recognized as a leader and innovator in cybersecurity solutions. The company is the first and only to integrate an Endpoint and Network threat detection platform, Managed Detection and Response services, and Cloud/SaaS delivery. Together, these capabilities provide the most effective response to the increased sophistication of continuously evolving malware and malicious insiders that target people, processes, and systems. With focus on innovation quality, integrity, and respect, GoSecure has become the trusted provider of cybersecurity products and services to organizations of all sizes, across all industries globally. To learn more, please visit: https://www.gosecure.net .
GoSecure offers a creative and challenging work environment, a competitive benefit package, and a great atmosphere to foster career growth. Come put your career on the leading edge and bring your talents to a much sought-after high growth opportunity in technology- GoSecure !
GoSecure is an Equal Opportunity Employer committed to hiring a diverse work team (EEO/AA).
Summary
An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.
As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.
Duties And Responsibilities
GoSecure offers a creative and challenging work environment, a competitive benefit package, and a great atmosphere to foster career growth. Come put your career on the leading edge and bring your talents to a much sought-after high growth opportunity in technology- GoSecure !
GoSecure is an Equal Opportunity Employer committed to hiring a diverse work team (EEO/AA).
Summary
An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.
As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.
Duties And Responsibilities
- Perform security test, in accordance to our methodology
- Coach other employees in techniques, tools and methodology in regard to this expertise.
- Improve knowledge and conduct research in regard to the state if the art of the expertise.
- The Intrusion Tester-SME may write tools and publications.
- Report the technical findings in a report. Tester may have to present the report to clients with varying level of technical knowledge. A good capacity to explain business impact as well as technical issues is a plus.
- Act as an advisor to the client
- Answers clients’ inquiries via phone or email in a professional and timely manner;
- Stay up-to-date on information technology trends, security standards and IT security news.
- Other duties as required.
- 2-3 years of relevant experience.
- French and English are mandatory for this position (due to client interactions)
- Bachelor’s degree in related field and/or equivalent education/experience.
- Knowledge of common pentesting methodologies (PTES, OSTMM), vulnerability scoring framework (CVSS, DREAD) and OWASP Top 10
- OSCP
- Should be eligible for Secret Clearance and not have any criminal records.
- Excellent written and verbal communication skills
- Energetic and positive attitude
- Exceptional ability to multitask and meet deadline
- 3 weeks’ vacation, 5 personal days, paid bereavement days
- 13 paid holidays
- Group insurance plan: health, dental, vision, disability, life, travel
- Employee assistance program (Dialogue)
- RRSP and matching employer contribution
- Peer recognition program and other awards granted throughout the years
- Company stock options
- Discounts on a variety of merchants
- Young and dynamic team always striving to improve
More about this job
Responsibilities
Conduct security tests across areas such as networks, web and mobile applications, wireless systems, and physical security, following established methodologies. Coach colleagues, research and improve testing practices, document and present findings, and advise clients on technical issues and business impact.
Requirements
Requires 2–3 years of relevant experience, French and English proficiency, and a bachelor's degree in a related field or equivalent education and experience. Candidates should know common penetration-testing methodologies, vulnerability scoring frameworks, and the OWASP Top 10; OSCP is also listed, and candidates must be eligible for Secret Clearance with no criminal record.
Skills
- Penetration Testing
- Wireless Security Assessment
- Web Application Testing
- Network Security Assessment
- Phishing Exercises
- Red Team Assessment
- Physical Security Assessment
- Code Review
- Mobile Application Security
- Embedded Device Security
- Security Research
- Security Tool Development
- Technical Reporting
- Client Advising
- Security Methodologies
- Communication
Benefits
- Vacation
- Personal Days
- Paid Bereavement Leave
- Paid Holidays
- Group Health Insurance
- Dental Insurance
- Vision Insurance
- Disability Insurance
- Life Insurance
- Travel Insurance
- Employee Assistance Program
- RRSP With Employer Matching
- Peer Recognition Program
- Company Stock Options
- Merchant Discounts
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Consulting
- Engineering
- Science & Research
Keywords
- Cybersecurity
- Penetration Testing
- Intrusion Testing
- Wireless Assessment
- Web Application Testing
- Internal Network Assessment
- External Network Assessment
- Phishing
- Red Team
- Physical Security Assessment
- Code Review
- Mobile Application Assessment
- Embedded Device Assessment
- PTES
- OSSTMM
- CVSS
- DREAD
- OWASP Top 10
- OSCP
- Vulnerability Scoring
- Security Testing Methodology
- Security Research
- Security Tool Development
- Technical Reporting
- Client Advising
- Secret Clearance
- Endpoint Threat Detection
- Network Threat Detection
- Managed Detection and Response
- Cloud/SaaS