Senior Advisor, Full-Scope Cross-Sector Intrusion Testing

Desjardins; Montreal; Presencial; CAD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary and annual bonus

4 weeks of flexible vacation starting

Defined benefit pension plan

Group insurance including telemedicine

Health and wellness expense reimburse.

Telework equipment

Descripción de la vacante

Desjardins' Attack Simulation Offensive Security Department seeks a senior advisor to lead full-scope cross-sector intrusion testing for high-impact scenarios across systems, networks, and apps. You will collaborate with cyber defence, development, architecture, and delivery teams, identify threats, and design precise offensive methods while mentoring colleagues.

This role combines strategic leadership with hands-on testing, requires eight+ years of pentesting, fluency in French and strong

Formación

• Bachelor's degree in IT or related field.
• At least eight years of penetration testing experience on complex systems.
• Experience analyzing source code and configuration within a security context.
• Experience in software development.
• Strong communication and ability to explain risks in plain language.
• Advanced proficiency in French (oral and written).
• Intermediate advanced proficiency in English (oral and written).
• Knowledge of AI technologies.
• Offensive knowledge in CI/CD environments and web/mobile apps.
• Knowledge of Windows and Linux security (hardening and attacks).
• Understanding attack chains and interactions of offensive, preventive, and detection mechanisms.
• Action oriented, collaboration, customer focus, innovation, interpersonal savvy, strategic mindset.

Responsabilidades

• Leverage advanced penetration techniques across networks, web apps and code.
• Identify and exploit vulnerabilities ethically with rigor and creativity.
• Act as an offensive security expert to strengthen Desjardins Group protections.
• Design, develop, implement and document effective methodologies and tools.
• Update technical skills to align with emerging needs and influence change.
• Strategically monitor threats and proactively identify issues.
• Communicate results clearly in plain language to all key players.
• Mentor colleagues and raise threat awareness across the organization.

Conocimientos

Penetration testing

Network security

Web applications

Source code analysis

Identity management

Software development

Communication

French

English

AI technologies

CI/CD security

Offensive security

Educación

Bachelor’s degree in IT or related field

Descripción del empleo

The Attack Simulation Offensive Security Department is looking for a senior advisor to join the full-scope Cross-Sector Intrusion Testing Team. This team simulates scenarios involving high-impact attacks on the organization. The team works without a fixed scope so it can better identify the most efficient ways to run through defined scenarios, with mandates running from one to three months. In this role, you will collaborate closely with teams focused on cyber defence, internal threats, development, architecture and continuous delivery. You’ll assess cybersecurity risks from different angles and help to build the organization’s defensive capacity. As a senior advisor, full-scope cross-sector intrusion testing, you help identify, analyze and mitigate threats to Desjardins Group’s systems, networks and apps. You plan for new threats based on the development of offensive techniques and threat actors. You will serve as an expert leader in carrying out high-impact strategic offensive mandates and will play an influential role with everyone involved to help implement the proposed recommendations.

You make recommendations on the development and execution of projects and initiatives with a high degree of operational and conceptual complexity. There will be a number of initiatives to align and coordinate, and interpersonal savvy is therefore essential. More specifically, you will be required to:

• Leverage advanced penetration techniques, expert knowledge in network security, web applications, source code analysis, corporate controls and identity management.
• Identify and exploit system vulnerabilities or weaknesses in a rigorous and ethical manner, demonstrating creativity and innovation.
• Act as an offensive security expert to support, advise and catalyze change to strengthen Desjardins Group’s protection against cyberattacks.
• Design, develop, implement and document effective, adapted and precise methodologies and tools, while mitigating the risks associated with their execution.
• Demonstrate autonomy and initiative in updating your technical skills and knowledge related to offensive security expertise, in line with emerging needs, to actively guide and influence change.
• Strategically monitor threats in your area of expertise to help proactively identify emerging security issues.
• Communicate offensive security activity results clearly and accurately, explaining the information in plain language so that all key players understand the risks and take the necessary actions.
• Contribute to the support, development and mentorship of colleagues and key players, both technically and in raising awareness and understanding of threats that the organization seeks to prevent.

What we offer

• Competitive salary and annual bonus.
• 4 weeks of flexible vacation starting in the first year.
• Defined benefit pension plan that provides predictable, stable income throughout retirement.
• Group insurance including telemedicine.
• Reimbursement of health and wellness expenses and telework equipment.

Benefits apply based on eligibility criteria.

What you bring to the table

• Bachelor’s degree in IT or a related field.
• A minimum of eight years of relevant experience conducting penetration tests on a variety of complex systems.
• Experience analyzing source code and configuration within a security context.
• Experience in software development.
• Expertise in communication and plain-language explanations for both technical and non-technical audiences.
• Advanced proficiency in French, both oral and written.
• Intermediate advanced proficiency of English, both oral and written due to the nature of the duties or work tools or because the position involves interactions with English-speaking partners, members and/or clients.
• Knowledge of how to use artificial intelligence technologies.
• Offensive knowledge related to CI/CD environments and web or mobile applications.
• Knowledge of Windows and Linux operating system security (hardening and attacks).
• Knowledge of attack chains and the interaction between offensive, preventive and detection mechanisms.
• Action oriented, Collaborates, Customer Focus, Innovation, Interpersonal Savvy, Strategic mindset.

Equity, Diversity, Inclusion and Accessibility

At Desjardins, we believe in equity, diversity and inclusion. We're committed to welcoming, respecting and valuing people for who they are as individuals, learning from their differences, embracing their uniqueness, and providing a positive workplace for all. At Desjardins, we have zero tolerance for discrimination of any kind. We believe our teams should reflect the diversity of the members, clients and communities we serve. If there's something we can do to help make the recruitment process or the job you're applying for more accessible, let us know. We can provide accommodations at any stage in the recruitment process. Just ask!

Desjardins Group is the largest cooperative financial group in North America. We're the choice for over 52,000 employees and we're named one of Canada's top employers by Mediacorp and Forbes. We offer a full range of financial products and services and share our expertise in personal services, business services, wealth management, life and health insurance, and property and casualty insurance. Pursuing a career at Desjardins means being part of an organization that puts people first.