Security Analyst - Pentest (5+ years of experience)
- Montreal, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- 5 years of relevant experience.
- Posting language
- English
- Posted
Original job description
GoSecure is recognized as a leader and innovator in cybersecurity solutions. The company is the first and only to integrate an Endpoint and Network threat detection platform, Managed Detection and Response services, and Cloud/SaaS delivery. Together, these capabilities provide the most effective response to the increased sophistication of continuously evolving malware and malicious insiders that target people, processes, and systems. With focus on innovation quality, integrity, and respect, GoSecure has become the trusted provider of cybersecurity products and services to organizations of all sizes, across all industries globally. To learn more, please visit: https://www.gosecure.net.
GoSecure offers a creative and challenging work environment, a competitive benefit package, and a great atmosphere to foster career growth. Come put your career on the leading edge and bring your talents to a much sought-after high growth opportunity in technology- GoSecure!
GoSecure is an Equal Opportunity Employer committed to hiring a diverse work team (EEO/AA).
Summary
An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.
As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.
Duties And Responsibilities
GoSecure offers a creative and challenging work environment, a competitive benefit package, and a great atmosphere to foster career growth. Come put your career on the leading edge and bring your talents to a much sought-after high growth opportunity in technology- GoSecure!
GoSecure is an Equal Opportunity Employer committed to hiring a diverse work team (EEO/AA).
Summary
An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.
As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.
Duties And Responsibilities
- Perform security test, in accordance to our methodology
- Coach other employees in techniques, tools and methodology in regard to this expertise.
- Improve knowledge and conduct research in regard to the state if the art of the expertise.
- The Intrusion Tester-SME may write tools and publications.
- Report the technical findings in a report. Tester may have to present the report to clients with varying level of technical knowledge. A good capacity to explain business impact as well as technical issues is a plus.
- Act as an advisor to the client
- Answers clients’ inquiries via phone or email in a professional and timely manner;
- Stay up-to-date on information technology trends, security standards and IT security news.
- Other duties as required.
- 5 years of relevant experience.
- French and English are mandatory for this position (due to client interactions)
- Bachelor’s degree in related field and/or equivalent education/experience.
- Knowledge of common pentesting methodologies (PTES, OSTMM), vulnerability scoring framework (CVSS, DREAD) and OWASP Top 10
- OSCP
- Should be eligible for Secret Clearance and not have any criminal records.
- Excellent written and verbal communication skills
- Energetic and positive attitude
- Exceptional ability to multitask and meet deadline
- 3 weeks’ vacation, 5 personal days, paid bereavement days
- 13 paid holidays
- Group insurance plan: health, dental, vision, disability, life, travel
- Employee assistance program (Dialogue)
- RRSP and matching employer contribution
- Peer recognition program and other awards granted throughout the years
- Company stock options
- Discounts on a variety of merchants
- Young and dynamic team always striving to improve
More about this job
Responsibilities
Conduct security assessments across areas such as networks, web and mobile applications, wireless systems, phishing, red teaming, and physical security, and document technical findings in client reports. Serve as a subject matter expert by coaching colleagues, advising clients, conducting research, and improving testing methodologies and tools.
Requirements
Requires at least five years of relevant experience, fluency in French and English, and knowledge of penetration-testing methodologies such as PTES and OSSTMM, vulnerability scoring frameworks such as CVSS and DREAD, and the OWASP Top 10. OSCP, a related bachelor's degree or equivalent experience, strong communication and multitasking skills, and eligibility for Secret Clearance with no criminal record are also specified.
Skills
- Penetration Testing
- Wireless Security Assessment
- Web Application Testing
- Network Security Assessment
- Phishing Exercises
- Red Team Assessment
- Physical Security Assessment
- Code Review
- Mobile Application Security
- Embedded Device Security
- Security Research
- Security Tool Development
- Technical Reporting
- Client Advising
- Coaching
- French and English Communication
Benefits
- Vacation
- Personal Days
- Paid Bereavement Leave
- Paid Holidays
- Health Insurance
- Dental Insurance
- Vision Insurance
- Disability Insurance
- Life Insurance
- Travel Insurance
- Employee Assistance Program
- RRSP With Employer Matching Contributions
- Peer Recognition Program
- Company Stock Options
- Merchant Discounts
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Consulting
Keywords
- Cybersecurity
- Penetration Testing
- PTES
- OSSTMM
- CVSS
- DREAD
- OWASP Top 10
- OSCP
- Wireless Assessment
- Web Application Testing
- Internal Network Assessment
- External Network Assessment
- Phishing
- Red Team
- Physical Security Assessment
- Code Review
- Mobile Application Assessment
- Embedded Device Assessment
- Security Testing Methodology
- Vulnerability Assessment
- Security Research
- Security Tool Development
- Technical Reporting
- Client Advising
- Secret Clearance
- French
- English