Security Analyst - Pentest (2+ years of experience)

GoSecure; Montreal; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

3 weeks vacation

5 personal days

Paid bereavement days

Group insurance

RRSP match

Stock options

Job summary

GoSecure in Montreal seeks an intrusion tester SME to conduct wireless, web, internal and external network, phishing, red team, and other security tests for clients.

You will coach colleagues, own the testing methodology, write tools, perform research, and present findings with clear business impact.

The role requires 2–3 years of relevant experience, English and French fluency, a related Bachelor’s degree and OSCP, plus eligibility for secret clearance.

Qualifications

• 2–3 years of relevant experience.
• Fluent in English and French due to client interactions.
• Bachelor’s degree in a related field; equivalent experience accepted.
• Knowledge of pentesting methodologies: PTES, OSTMM; vulnerability scoring (CVSS, DREAD) and OWASP Top 10.
• OSCP certification preferred or required.
• Eligible for Secret clearance and no criminal records.
• Excellent written and verbal communication skills.
• Energetic and able to multitask and meet deadlines.

Responsibilities

• Perform security tests per GoSecure methodology.
• Coach and mentor colleagues on techniques and tools related to this expertise.
• Develop and refine testing tools; conduct research.
• Document findings in client reports and present to clients as needed.
• Stay up-to-date on security trends and standards.
• Act as advisor to clients and respond to inquiries promptly.

Skills

Bilingual English/French

Excellent communication

Multitasking

Education

Bachelor's degree in related field

OSCP certification

Tools

PTES

OSTMM

OWASP Top 10

CVSS

DREAD

Job description

GoSecure is recognized as a leader and innovator in cybersecurity solutions. The company is the first and only to integrate an Endpoint and Network threat detection platform, Managed Detection and Response services, and Cloud/SaaS delivery. Together, these capabilities provide the most effective response to the increased sophistication of continuously evolving malware and malicious insiders that target people, processes, and systems. With focus on innovation quality, integrity, and respect, GoSecure has become the trusted provider of cybersecurity products and services to organizations of all sizes, across all industries globally. To learn more, please visit: https://www.gosecure.net.

GoSecure offers a creative and challenging work environment, a competitive benefit package, and a great atmosphere to foster career growth. Come put your career on the leading edge and bring your talents to a much sought-after high growth opportunity in technology- GoSecure! GoSecure is an Equal Opportunity Employer committed to hiring a diverse work team (EEO/AA).

Summary

An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.

As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.

Duties and responsibilities

• Perform security test, in accordance to our methodology
• Coach other employees in techniques, tools and methodology in regard to this expertise.
• Improve knowledge and conduct research in regard to the state if the art of the expertise.
• The Intrusion Tester-SME may write tools and publications.
• Report the technical findings in a report. Tester may have to present the report to clients with varying level of technical knowledge. A good capacity to explain business impact as well as technical issues is a plus.
• Act as an advisor to the client
• Answers clients’ inquiries via phone or email in a professional and timely manner;
• Stay up-to-date on information technology trends, security standards and IT security news.
• Other duties as required.

Qualifications

• 2-3 years of relevant experience.
• French and English are mandatory for this position (due to client interactions)
• Bachelor’s degree in related field and/or equivalent education/experience.
• Knowledge of common pentesting methodologies (PTES, OSTMM), vulnerability scoring framework (CVSS, DREAD) and OWASP Top 10
• OSCP
• Should be eligible for Secret Clearance and not have any criminal records.
• Excellent written and verbal communication skills
• Energetic and positive attitude
• Exceptional ability to multitask and meet deadline

Why come to GoSecure?

• 3 weeks’ vacation, 5 personal days, paid bereavement days
• 13 paid holidays
• Group insurance plan: health, dental, vision, disability, life, travel
• Employee assistance program (Dialogue)
• RRSP and matching employer contribution
• Peer recognition program and other awards granted throughout the years
• Company stock options
• Discounts on a variety of merchants
• Young and dynamic team always striving to improve

and much more!