Junior Offensive Security Consultant (Penetration Tester)

Advanced Information Management, Inc.; Oakville; Hybrid; CAD 60,000 - 100,000; Full time

Job summary

An innovative firm is seeking a motivated Junior Penetration Tester to join its dynamic team. This hybrid role offers a unique opportunity to work alongside seasoned cybersecurity experts while developing hands-on skills in offensive security. As a Junior Penetration Tester, you will assist in various penetration testing projects, conduct thorough vulnerability analyses, and stay updated on the latest security trends. This position is perfect for someone eager to learn and grow in a supportive environment, contributing to real-world projects that enhance security measures for clients. If you're passionate about cybersecurity and ready to take your skills to the next level, this opportunity is for you!

Qualifications

• 2+ years in offensive security with a focus on Penetration Testing.
• Familiarity with penetration testing tools and methodologies.

Responsibilities

• Assist in executing penetration tests and documenting security vulnerabilities.
• Conduct vulnerability analysis and compile actionable reports.

Skills

Penetration Testing

Vulnerability Analysis

Networking

System Administration

Python

PowerShell

Bash

Communication Skills

Education

OSCP Certification

CRTP Certification

CRTO Certification

Tools

Nmap

Burp Suite

Metasploit

Job description

Overview:

We seek a motivated Junior Penetration Tester to join our team in the Greater Toronto Area. This hybrid role offers a mix of remote work and in-person engagements. This position is ideal for someone looking to grow their skills alongside a team of seasoned cybersecurity experts.

Job Summary:

As a Junior Penetration Tester, you will participate in various penetration testing engagements, working under the guidance of senior team members. This role provides a unique opportunity to develop hands-on experience in offensive security, learn directly from industry experts, and contribute to real-world projects.

Key Responsibilities:

1. Assist in Penetration Testing Projects: Work closely with senior team members to support the execution of penetration tests across client environments. This involves hands-on engagement in identifying, assessing, and documenting security vulnerabilities while ensuring compliance with established testing protocols and methodologies.
2. Vulnerability Analysis and Reporting: Conduct a thorough analysis of vulnerabilities uncovered during security assessments. Collaborate with the team to compile clear, actionable, and concise reports highlighting risks, potential impacts, and recommended remediation strategies for clients.
3. Learn and Develop Skills: Participate in continuous learning under the guidance of experienced professionals. Focus on developing advanced skills in penetration testing and Red Team operations, gaining exposure to real-world scenarios and honing techniques crucial to offensive security.
4. Stay Updated on Threats and TTPs: Regularly research and stay informed on the latest offensive security trends, tools, and techniques. Actively apply this knowledge to enhance personal skills and contribute to the team’s objectives in identifying and mitigating evolving security threats.

Required Qualifications:

1. Experience: 2+ years in offensive security, focusing on Penetration Testing exercises.
2. Certifications: At least one of the following OSCP (Offensive Security Certified Professional), CRTP (Certified Red Team Professional), CRTO (Certified Red Team Operator) or equivalent certifications.
3. Technical Skills:
1. Familiarity with penetration testing tools and methodologies (e.g., Nmap, Burp Suite, Metasploit).
2. Basic understanding of networking, system administration, and common vulnerabilities.
3. Scripting knowledge in Python, PowerShell, or Bash is a plus.
4. Language: Fluent in English, with excellent verbal and written communication skills.
5. Location: Live in the Greater Toronto Area.

Preferred Qualifications:

1. Canada Government Security Clearance Level 2.
2. Active in the Cybersecurity Community, including participating in CTFs and vulnerable environments platforms (TryHackMe, HackTheBox, etc).
3. An eagerness to learn and a proactive approach to problem-solving.
4. Knowledge of cloud environments (AWS, Azure, GCP) is an asset.

Hours:

40 hours per week.

Compensation:

Market Competitive salary based on experience & Qualifications.