Consultant, Offensive Security

Kroll; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

Kroll in Canada is seeking experienced penetration testers to assess networks, web and mobile apps, cloud infrastructure, and users via social engineering. You will deliver vulnerability reports and executive summaries while engaging clients to scope, track progress, and implement remediation.

Join a global leader in risk and advisory services, work with cutting-edge tools, and grow your offensive security expertise within a collaborative team environment.

Qualifications

• Bachelor’s degree or college diploma in information security, computer science or engineering, or IT/System/Network administration.
• 3+ years in cybersecurity, with at least 2 years in network penetration testing.
• Strong understanding of Windows, Active Directory, Linux, networking, and security architecture.
• Knowledge of routing, switching, VLANs, firewalls, ACLs, VPNs, and segmentation.
• Familiarity with IDS/IPS, EDR, SIEM, DLP, and endpoint security platforms.
• Understanding of offensive security methodologies and frameworks (OWASP, MITRE ATT&CK, PTES).
• Experience with common offensive security tools: Nmap, Nessus, Kali Linux, Burp Suite, PowerShell.
• Ability to analyze root causes and deliver technical recommendations.
• Excellent oral and written communication skills.
• Team-oriented and independent work capability.
• Certifications such as OSCP, GPEN, CCNA, etc., are an asset.

Responsibilities

• Execute offensive security and consultative engagements for clients’ network infrastructure and applications.
• Author vulnerability and executive reports.
• Engage with clients to understand requirements, update on status, answer queries, and present findings and recommendations.
• Update skills with the latest trends in cybersecurity and emerging technology.

Skills

Communication skills

Teamwork

Root-cause analysis

Independent worker

Education

Bachelor's degree / college diploma in information security or related field

Tools

Nmap

Nessus

Kali Linux

Burp Suite

PowerShell

Job description

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity, not just answers, in all areas of business. We embrace diverse backgrounds and global perspectives, and we cultivate diversity by respecting, including, and valuing one another. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel.

Our Offensive Security professionals are on a mission to make the world a safer place, one company at a time. We believe that our work to help our clients discover and remediate their unique security risks makes every one of us safer. Our clients trust us to use cutting‑edge offensive security tools, creativity, imagination, and expert knowledge to find cybersecurity risks in their networks, systems, and software.

We're looking to grow our team of penetration testers in Canada. We perform testing of computer networks, web and smartphone applications, cloud infrastructure, hardware devices, employees via social engineering, organizations via red team testing, and more.

At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges.

Execute offensive security and consultative engagements for our clients’ network infrastructure and applications

Author deliverables such as vulnerability reports and executive reports

Engage with our clients to understand their requirements, update them on project status, answer their queries, and present your findings and recommendations

Update your skills and knowledge with the latest trends in cybersecurity and emerging technology

REQUIREMENTS:

• Bachelor’s degree or college diploma in information security, computer science or engineering, or IT/System/Network administration
• 3+ years in cybersecurity, with at least 2 years in network penetration testing
• Strong understanding of Windows, Active Directory, Linux, networking, and security architecture
• Knowledge of network concepts including routing, switching, VLANs, firewalls, ACLs, VPNs, and segmentation
• Familiarity with security technologies such as IDS/IPS, EDR, SIEM, DLP, and endpoint security platforms
• A strong understanding of offensive security methodology and vulnerability frameworks such as the OWASP Testing Guide, MITRE ATT&CK, PTES, or others
• Experience with common offensive security tools including nmap, Nessus, Kali Linux, Burp Suite, PowerShell
• An ability to analyze root causes and deliver technological recommendations to our clients
• Excellent oral and written communication skills
• Experience working both as part of a team and independently
• Certifications such as OSCP, SANS GPEN, Cisco CCNA, CompTIA Network+, OSWE, SANS GWAPT, CREST CPSA, or CREST CRT, are an asset

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting‑edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.