Titre du poste / Position: PTaaS specialist
Description du mandat / Mandate description:
Three big phases in this project:
- understanding the problem, requirements and objectives
- designing the solution and getting approval/deployment
- integrate all applications and environments
General Context & Main Objective
Strategic Vision: The client aims to evolve its operating model toward a "Pentest-as-a-Service" approach.
Current Challenge: Internal teams face recurring difficulties during the onboarding phase. The process suffers from a lack of clarity regarding integration, obtaining necessary access for all web applications, and upfront preparation.
Mission Objective: The mandate focuses on structuring, process implementation, and operational optimization rather than a purely technical or execution-based role.
2. Role and Expected Responsibilities
- The successful candidateâs primary mission will be to act as a coordinator and designer of offensive security processes:
Defining processes and procedures: Designing and drafting procedures for the onboarding, preparation, and organization of penetration tests.
Coordinating application onboarding: Establishing clear mechanisms for managing access and technical prerequisites for the applications to be tested.
Proposing improvements and tooling:
- Proposing methodological improvements.
- Automating/scripting interfaces and connections between various security tools where necessary.
- Implementing or recommending solutions (including tracking databases) to streamline workflows.
- Understanding application standards: Assessing and integrating web application security and certification requirements into the overall process.
3. Desired Profile and Skills
- Large enterprise experience: The candidate must come from or have worked in large, structured environments (preferred sectors: banking, finance, insurance).
- Key competency (Process vs. Pure Pentesting): Concrete experience in designing upstream processes and drafting procedures is required. Profiles of "pure pentester" consultants - who handle only the technical execution phase without involvement in structuring or preparation - are not suitable.
- Technical understanding of Red Teaming/Pentesting: A solid technical foundation in penetration testing and web application security is required to fully grasp access and certification requirements.
------------------------------------------------------------
Langues parlées et écrites / Languages spoken and written: English
Niveau d'expérience / Level of experience: Senior
Années d'expérience / Years of experience: 10
Exigences minimum / Minimum requirements:
- IT solution delivery experience
- In depth understanding of web application and API authentication mechnisms
- Experience in designing processes and writing procedures
Technologies demandées / Technologies required:
Autres exigences / Other requirements:
Certifications et/ou expérience / Certification and/or experience:
------------------------------------------------------------
Lieu de travail / Location: Montreal,QC (2020) , Toronto,ON, Vancouver,BC
Début du mandat / Start Date: 2026-10-19
Fin du mandat / End Date: 2027-04-16
