Security Analyst - Pentest (5+ years of experience)

GoSecure; Montreal; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Paid holidays

Stock options

RRSP matching

Job summary

GoSecure in Montreal, QC is seeking an Intrusion Tester – SME to lead and execute advanced security tests for clients, including web app, network, phishing, and blue/red team exercises. You will own testing methodologies, coach peers, write tools, and present findings with business impact.

The role requires 5 years of experience, fluency in French and English, and a security-focused mindset. You’ll work with a dynamic team on cutting-edge cybersecurity projects and client engagements.

Qualifications

• 5 years of relevant experience.
• French and English are mandatory for this position.
• Bachelor’s degree in related field and/or equivalent education/experience.
• Knowledge of common pentesting methodologies (PTES, OSTMM), vulnerability scoring framework (CVSS, DREAD) and OWASP Top 10.
• OSCP certification is preferred.

Responsibilities

• Perform security tests in accordance with our methodology.
• Coach other employees in techniques, tools and methodology in regard to this expertise.
• Improve knowledge and conduct research in regard to the state of the art of the expertise.
• May write tools and publications.
• Report technical findings in a client report and present findings with business impact.

Skills

Penetration testing

Security testing

Bilingual FR/EN

Technical writing

Client communication

Education

Bachelor's degree

Tools

PTES

OSTMM

CVSS

OWASP Top 10

OSCP

Job description

GoSecure is recognized as a leader and innovator in cybersecurity solutions. The company is the first and only to integrate an Endpoint and Network threat detection platform, Managed Detection and Response services, and Cloud/SaaS delivery. Together, these capabilities provide the most effective response to the increased sophistication of continuously evolving malware and malicious insiders that target people, processes, and systems. With focus on innovation quality, integrity, and respect, GoSecure has become the trusted provider of cybersecurity products and services to organizations of all sizes, across all industries globally. To learn more, please visit: https://www.gosecure.net.

GoSecure offers a creative and challenging work environment, a competitive benefit package, and a great atmosphere to foster career growth. Come put your career on the leading edge and bring your talents to a much sought-after high growth opportunity in technology- GoSecure!

GoSecure is an Equal Opportunity Employer committed to hiring a diverse work team (EEO/AA).

Summary

An intrusion tester is part of the security testing team and performs various types of security tests for clients. Tests may include wireless assessment, web application test, internal network assessment, external network assessment, phishing exercises, red team assessment, physical security assessment, code review, mobile application assessment, embedded device assessment and other types of security tests.

As a subject matter expert, the candidate is expected to coach other employees in techniques, tools and procedures related to his expertise. The candidate is also the owner of the testing methodology in regard to this expertise. The SME may also be expected to write tools, conduct research and improve the state of the art of the area of expertise.

Duties and responsibilities

• Perform security test, in accordance to our methodology
• Coach other employees in techniques, tools and methodology in regard to this expertise.
• Improve knowledge and conduct research in regard to the state if the art of the expertise.
• The Intrusion Tester-SME may write tools and publications.
• Report the technical findings in a report. Tester may have to present the report to clients with varying level of technical knowledge. A good capacity to explain business impact as well as technical issues is a plus.
• Act as an advisor to the client
• Answers clients’ inquiries via phone or email in a professional and timely manner;
• Stay up-to-date on information technology trends, security standards and IT security news.
• Other duties as required.

Qualifications

• 5 years of relevant experience.
• French and English are mandatory for this position (due to client interactions)
• Bachelor’s degree in related field and/or equivalent education/experience.
• Knowledge of common pentesting methodologies (PTES, OSTMM), vulnerability scoring framework (CVSS, DREAD) and OWASP Top 10
• OSCP
• Should be eligible for Secret Clearance and not have any criminal records.
• Excellent written and verbal communication skills
• Energetic and positive attitude
• Exceptional ability to multitask and meet deadline

Why come to GoSecure?

• 3 weeks’ vacation, 5 personal days, paid bereavement days
• 13 paid holidays
• Group insurance plan: health, dental, vision, disability, life, travel
• Employee assistance program (Dialogue)
• RRSP and matching employer contribution
• Peer recognition program and other awards granted throughout the years
• Company stock options
• Discounts on a variety of merchants
• Young and dynamic team always striving to improve

and much more!