Security Testing & Assurance Specialist

Sportchek; Toronto; On-site; CAD 53,000 - 95,000; Full time

Benefits offered by this job

Benefits

Retirement plan

Incentives

Education programs

Product discounts

Career growth

Job summary

Sportchek in Toronto is seeking an Information Security Specialist to lead testing strategy and security testing across apps and infrastructure. You will collaborate with developers, analysts, product managers, and risk assessors to identify vulnerabilities and drive remediation.

The role requires 4-6 years of security experience, knowledge of PowerBI and PowerAutomate, and familiarity with AD, Windows, UNIX, networks, and CVSS.

Qualifications

• 4-6 years of technical security experience in a large enterprise.
• Knowledge of PowerBI and PowerAutomate.
• Experience with application security best practices and security testing.
• Strong understanding of Active Directory Infrastructure, deployment services, Windows OS, UNIX.
• Knowledge of network technologies – Firewalls, routers, switches.
• Experience with Vulnerability and Patch management processes and vulnerability scoring systems (CVSS/CMSS).
• Knowledge of application, network, and platform security practices.
• Excellent writing and presentation skills to facilitate communication of vulnerabilities, priorities, and other escalation points to various stakeholders.
• Certification in Security is preferred (e.g. CISSP, CEH).
• Project management experience and skills are an asset.

Responsibilities

• Test Planning and Strategy: Developing comprehensive test plans and strategies that outline the scope, approach, resources, and schedule for testing activities.
• Requirement Analysis: Understanding and analyzing the requirements and specifications of software applications to determine the testing scope.
• Test Case Development: Designing, writing, and maintaining detailed and structured test cases based on requirements and functional specifications.
• Test Execution: Performing manual and automated testing of software applications, including functional, regression, integration, performance, and user acceptance testing.
• Defect Tracking: Identifying, documenting, and tracking defects or issues using bug tracking tools. Collaborating with developers to resolve these issues.
• Test Automation: Developing and maintaining automated test scripts to streamline testing processes and improve coverage.
• Reporting: Preparing detailed test reports that summarize the findings of testing activities, including metrics like test coverage, defect density, and pass/fail rates.
• Collaboration: Working closely with developers, business analysts, product managers, risk assessors, and other stakeholders to ensure a thorough understanding of requirements and seamless integration of testing efforts into the overall project workflow.
• Compliance: Ensuring that testing processes adhere to industry standards, regulatory requirements, and company policies, including PCI, GRC, etc
• Continuous Improvement: Identifying opportunities to enhance testing processes and practices through feedback loops, best practices, and new tools or methodologies.

Skills

Security

PowerBI

PowerAutomate

Application security

AD/Windows/UNIX

Networking

Vulnerability management

Communication

Security certifications

Tools

PowerBI

PowerAutomate

Job description

Sportchek in Toronto is seeking an Information Security Specialist to lead testing strategy and security testing across apps and infrastructure. You will collaborate with developers, analysts, product managers, and risk assessors to identify vulnerabilities and drive remediation.

The role requires 4-6 years of security experience, knowledge of PowerBI and PowerAutomate, and familiarity with AD, Windows, UNIX, networks, and CVSS.