Specialist, Threat Emulation and Security Validation

Teck Resources; Richmond; On-site; CAD 103,000 - 127,000; Full time

Job summary

Join an innovative resource company as a Specialist in Threat Emulation and Security Validation. This role offers the opportunity to work with cutting-edge security processes, automating offensive security tasks, and conducting penetration tests. You will collaborate with a team of experts to enhance the organization's security posture while enjoying a culture of inclusivity and collaboration. With captivating projects and a focus on personal and professional growth, this position promises a fulfilling career adventure. Embrace the chance to make an impact in a dynamic environment dedicated to responsible resource management.

Benefits

Annual Performance Bonus

Profit Share Plan

Health Spending Account

Personal Spending Account

Extended Health Care

Dental and Vision Care

Employer Paid Pension Plan

Life Insurance and Disability Coverage

Paid Sick Leave, Vacation and Holidays

Employee and Family Assistance Program (EFAP)

Qualifications

• 5+ years in offensive security with a focus on penetration testing.
• Certified Ethical Hacker and Offensive Security Certified Professional required.
• Strong coding skills in Python, Ruby, or PowerShell.

Responsibilities

• Conduct penetration tests and vulnerability assessments regularly.
• Develop automated scripts for security testing and maintain tools.
• Collaborate with teams to enhance the security posture.

Skills

Penetration Testing

Vulnerability Assessment

Automation of Security Tasks

Threat Intelligence

Incident Response

Scripting in Python

Scripting in Ruby

Scripting in PowerShell

Education

Certified Ethical Hacker (CEH)

Offensive Security Certified Professional (OSCP)

Additional Security Certifications (GIAC, GPEN, GWAPT)

Tools

Metasploit

Burp Suite

Nessus

Kali

SOAR Platforms

Job description

Closing Date: March 21, 2025

Position Status: Vacant

Teck is a leading Canadian resource company focused on responsibly providing the metals essential for global development and the energy transition while caring for the people, communities and land that we love.

Reporting to the Manager, Cyber Threat Defence, the Specialist, Threat Emulation and Security Validation will collaborate with a team of third-party offensive security experts, develop innovative security processes, and collaborate with partners to improve our security posture. Your role will focus on automating offensive security tasks and building reusable scripts and tools to streamline and improve our testing capabilities. In this role, you will be responsible for conducting penetration tests, vulnerability assessments, and red team exercises to identify and address security weaknesses in our systems and networks.

Responsibilities

• Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures
• Champion the 3 lines of defense model for risk management and act as a 2nd line of defense facilitator regularly interacting with the 1st line of defense
• Develop and implement automated penetration testing scripts and tools and maintain offensive security scripts and automation tools using languages such as Python, Ruby, or PowerShell
• Conduct regular automated penetration tests and vulnerability assessments using industry-standard tools and custom scripts
• Integrate offensive security tools with other security platforms to enable seamless orchestration and automation
• Collaborate with the threat intelligence and detection teams to ensure a comprehensive and integrated security approach
• Continuously update and refine offensive security tools, techniques, and methodologies to address emerging threats
• Provide guidance and support to the detection and response team on day-to-day operations and strategic projects

Qualifications

• 5+ years of experience in offensive security, penetration testing, and vulnerability assessment
• Certified Ethical Hacker (CEH) and Offensive Security Certified Professional (OSCP) or equivalent. Additional relevant certifications (e.g., GIAC, GPEN, GWAPT) are a plus
• Proven track record in automating security testing and developing custom security tools
• Experience in working with third-party security service providers
• Solid understanding of security operations, including threat intelligence, threat detection, incident response, and offensive security
• Expertise in penetration testing tools and platforms (e.g., Metasploit, Burp Suite, Nessus, Kali)
• Strong coding and scripting skills in Python, Ruby, PowerShell, or similar languages
• Experience with automating offensive security tasks and processes
• Knowledge of security automation and orchestration platforms (e.g., SOAR)
• Understanding of APIs and integration techniques for security tools
• Embody Teck values in daily activities by being responsible and courageous, respectful and inclusive, alongside humble and driven
• You can demonstrate personal accountability, radical transparency and a growth mindset

Why Join Us?

At Teck, we offer more than just a job – we provide a pathway to personal and professional enrichment. With captivating projects set against stunning backdrops, a culture of inclusivity and collaboration, and boundless opportunities to learn and grow, joining us means embracing a fulfilling and dynamic career adventure.

Teck employees receive access to our total rewards program and comprehensive benefits package that promote physical, mental, financial, and emotional well-being. This includes but is not limited to:

• Annual Performance Bonus
• Profit Share Plan
• Health Spending Account
• Personal Spending Account
• Extended Health Care
• Dental and Vision Care
• Employer Paid Pension Plan
• Life Insurance and Disability Coverage
• Paid Sick Leave, Vacation and Holidays
• Virtual Telemedicine and additional support for overall well-being
• Employee and Family Assistance Program (EFAP)

Salary Range: $103,000 - $127,000

The actual base salary offered is determined based on the successful candidate’s relevant experience, skills, and competencies and considers internal equity.