Senior Penetration Testing Consultant

This is a fully remote position, open to applicants in Canada.

📋 Description

• Lead and carry out penetration testing projects.

• Evaluate intricate environments.

• Collaborate closely with stakeholders to uncover vulnerabilities and misconfigurations.

• Exploit identified weaknesses and provide recommendations for mitigating findings.

• Conduct penetration assessments on networks, applications, APIs, and cloud environments.

• Execute red team and purple team exercises, social engineering, and assessments of detection capabilities.

• Create comprehensive reports detailing findings, risk ratings, and remediation advice.

• Keep updated on emerging threats, tools, and offensive security methodologies.

• Mentor junior team members.

• Contribute to the development of methodologies.

⛳️ Requirements

• Over 5 years of practical experience in penetration testing, ideally within professional services.

• Strong understanding of network protocols, web application security, and cloud platforms (AWS, Azure, GCP).

• Proficient in using Burp Suite, Cobalt Strike, and custom scripts.

• Capability to develop custom exploits and scripts in Python, PowerShell, or Bash.

• Familiarity with the MITRE ATT&CK framework and OWASP Top 10.

• Certifications such as OSCP, OSCE, OSEP, or equivalent are highly preferred.

• Ability to collaborate with peers for review and support.

• Exceptional report writing and client communication abilities.

🏝️ Benefits

• Equal opportunity employer.

• Accommodations or adjustments provided throughout the interview process and beyond.

• Inclusive work environment.

• Opportunity to collaborate with leading global insurance carriers, top law firms, and Fortune 1000 companies.