Security Analyst - Pentest (3 to 5 years of experience)

GoSecure; Montreal; On-site; CAD 85,000 - 120,000; Full time

Benefits offered by this job

13 paid holidays

Group insurance (health/dental/vision)

RRSP and employer matching

Employee assistance program

Stock options

Merchant discounts

Dynamic team

Job summary

GoSecure is seeking a Security Analyst - Pentest with 3 to 5 years of experience to lead security testing across clients. The role requires French and English fluency due to client interactions, a Bachelor's degree or equivalent, and knowledge of PTES/OSTMM, CVSS, DREAD, and OWASP Top 10.

OSCP is preferred. The incumbent will provide mentoring, develop testing tools, and present technical findings to diverse audiences, while contributing to GoSecure's continued leadership in cybersecurity

Qualifications

• 3–5 years of relevant experience.
• Fluent in French and English (mandatory).
• Bachelor's degree or equivalent education/experience.
• Knowledge of common pentesting methodologies and vulnerability scoring.

Responsibilities

• Conduct security tests per our methodology.
• Coach colleagues on techniques and tools related to pentesting.
• Research and stay updated on security trends and standards.
• Write tools and publish findings as needed.
• Present findings and business impact to clients.

Skills

Security testing

Communications

Multitasking

Bilingual (French/English)

Education

Bachelor's degree

Tools

PTES

OSTMM

CVSS

DREAD

OWASP Top 10

OSCP

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Security Analyst - Pentest (3 to 5 years of experience)

Pentest Full Time COS: Services Montréal, QC, CA

GoSecure is recognized as a leader and innovator in cybersecurity solutions. The company is the first and only to integrate an Endpoint and Network threat detection platform, Managed Detection and Response services, and Cloud/SaaS delivery. Together, these capabilities provide the most effective response to the increased sophistication of continuously evolving malware and malicious insiders that target people, processes, and systems. With focus on innovation quality, integrity, and respect, GoSecure has become the trusted provider of cybersecurity products and services to organizations of all sizes, across all industries globally. To learn more, please visit: https://www.gosecure.net .

GoSecure offers a creative and challenging work environment, a competitive benefit package, and a great atmosphere to foster career growth. Come put your career on the leading edge and bring your talents to a much sought-after high growth opportunity in technology- GoSecure ! GoSecure is an Equal Opportunity Employer committed to hiring a diverse work team (EEO/AA).

Summary

An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.

As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.

Duties and responsibilities

• Perform security test, in accordance to our methodology
• Coach other employees in techniques, tools and methodology in regard to this expertise.
• Improve knowledge and conduct research in regard to the state if the art of the expertise.
• The Intrusion Tester-SME may write tools and publications.
• Report the technical findings in a report. Tester may have to present the report to clients with varying level of technical knowledge. A good capacity to explain business impact as well as technical issues is a plus.
• Act as an advisor to the client
• Answers clients' inquiries via phone or email in a professional and timely manner;
• Stay up-to-date on information technology trends, security standards and IT security news.
• Other duties as required.

Qualifications

• 3 to 5 years of relevant experience.
• French and English are mandatory for this position (due to client interactions)
• Bachelor's degree in related field and/or equivalent education/experience.
• Knowledge of common pentesting methodologies (PTES, OSTMM), vulnerability scoring framework (CVSS, DREAD) and OWASP Top 10
• OSCP
• Should be eligible for Secret Clearance and not have any criminal records.
• Excellent written and verbal communication skills
• Energetic and positive attitude
• Exceptional ability to multitask and meet deadline

Why come to GoSecure ?

• 13 paid holidays
• Group insurance plan: health, dental, vision, disability, life, travel
• Employee assistance program (Dialogue)
• RRSP and matching employer contribution
• Peer recognition program and other awards granted throughout the years
• Company stock options
• Discounts on a variety of merchants
• Young and dynamic team always striving to improve