Senior Security Consultant

This is a fully remote position, open to applicants in Canada.

📋 Description

• Assist in security testing initiatives for clients.

• Carry out security evaluations of both infrastructure and web applications, utilizing both automated and manual methods.

• Execute penetration tests and simulate attacks, including red team and blue team exercises.

• Evaluate common application vulnerabilities, particularly those identified in the OWASP Top 10 and CWE Top 25.

• Utilize both commercial and open-source penetration testing tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, CANVAS, SQLMap, and Empire.

• Produce reports and create presentations.

• Articulate technical findings to audiences without a technical background.

• Offer remediation advice.

• Collaborate with the Offensive Security Manager and the Professional Services team at TELUS Cybersecurity.

⛳️ Requirements

• Over 5 years of experience in penetration testing, cybersecurity development, and/or technical support.

• Expertise in offensive security tools such as Qualys, Nessus, Nmap, and others.

• Familiarity with Burp Suite, SQLMap, and OWASP ZAP for assessments of web applications.

• In-depth knowledge of both Linux and Windows operating systems.

• Programming skills in Python, PowerShell, Ruby, or other relevant languages.

• Understanding of penetration testing methodologies and standards, including PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, and CVSS.

• Excellent oral and written communication skills, along with strong report-writing capabilities.

• Experience interacting with clients from a range of industries and organizational types.

• Capability to analyze complex issues and convey them clearly.

• Competence in managing multiple projects, effectively organizing time, and working with minimal supervision.

• Valid Secret Level II security clearance or the ability to obtain one (mandatory).

• Advanced proficiency in English is essential.

• Assets: Familiarity with Internet of Things (IoT) security; understanding of social engineering techniques and wireless security testing; relevant professional certifications; knowledge of GRC standards; participation in open-source projects, CTF competitions, or bug bounty programs; software development skills; and experience with AWS, Azure, or GCP infrastructure.

• University degree or equivalent experience in a related field (preferred).

• Certifications such as OSCP, CRTO, GWAPT, GPEN, OSCE, CSSLP, or ECSA (preferred).

🏝️ Benefits

• Performance bonus or Sales Incentive Program: 15%.

• TELUS work-from-home solutions.

• A culture of innovation and opportunities for professional development.

• Competitive total compensation adjusted based on experience level and expertise.

• A workplace culture that promotes diversity and equitable access to employment opportunities.