Security Analyst - Pentest
- Montreal, QC, Canada
- Quebec, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Experience
- 2-3 years of relevant experience.
- Posting language
- English
- Posted
Original job description
Summary
An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.
As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.
Duties and responsibilities
- Perform security test, in accordance to our methodology
- Coach other employees in techniques, tools and methodology in regard to this expertise.
- Improve knowledge and conduct research in regard to the state if the art of the expertise.
- The Intrusion Tester-SME may write tools and publications.
- Report the technical findings in a report. Tester may have to present the report to clients with varying level of technical knowledge. A good capacity to explain business impact as well as technical issues is a plus.
- Act as an advisor to the client
- Answers clients’ inquiries via phone or email in a professional and timely manner;
- Stay up-to-date on information technology trends, security standards and IT security news.
- Other duties as required.
Qualifications
- 2-3 years of relevant experience.
- French and English are mandatory for this position (due to client interactions)
- Bachelor’s degree in related field and/or equivalent education/experience.
- Knowledge of common pentesting methodologies (PTES, OSTMM), vulnerability scoring framework (CVSS, DREAD) and OWASP Top 10
- OSCP
- Should be eligible for Secret Clearance and not have any criminal records.
- Excellent written and verbal communication skills
- Energetic and positive attitude
- Exceptional ability to multitask and meet deadline
More about this job
Responsibilities
The intrusion tester performs various security assessments for clients, including network, web, and physical security testing. They are also responsible for coaching team members, developing testing methodologies, and reporting technical findings to clients.
Requirements
Candidates must have 2-3 years of relevant experience and a bachelor's degree in a related field. Proficiency in English and French is mandatory, along with OSCP certification and eligibility for Secret Clearance.
Skills
- Penetration testing
- Wireless assessment
- Web application testing
- Network assessment
- Phishing exercises
- Red team assessment
- Physical security assessment
- Code review
- Mobile application assessment
- Embedded device assessment
- PTES
- OSTMM
- CVSS
- DREAD
- OWASP Top 10
- OSCP
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
Keywords
- Security Analyst
- Pentest
- Intrusion Tester
- Wireless Assessment
- Web Application Test
- Network Assessment
- Phishing
- Red Team
- Physical Security
- Code Review
- Mobile Application Assessment
- Embedded Device Assessment
- PTES
- OSTMM
- CVSS
- DREAD
- OWASP Top 10
- OSCP
- Secret Clearance
- Vulnerability Scoring