Senior Security Consultant

This is a fully remote position, open to applicants in Canada.

📋 Description

• Assist in client security testing projects as part of TELUS Cyber Security Professional Services.

• Execute both automated and manual security assessments for infrastructure and web applications.

• Carry out penetration testing and engage in offensive security initiatives.

• Evaluate security for web applications, infrastructure, and cloud environments.

• Engage in vulnerability management and participate in red/blue team activities.

• Provide recommendations for remediation efforts.

• Support various client projects and assignments.

• Draft reports and create presentations that communicate technical findings to audiences without specialized knowledge.

• Report directly to the Principal of Cyber Security Professional Services.

⛳️ Requirements

• Over 5 years of experience in penetration testing, development, and/or technical support in the cybersecurity field.

• In-depth experience in offensive security and penetration testing methodologies.

• Practical experience in web application security, infrastructure testing, cloud security, vulnerability management, red/blue team engagements, and providing remediation recommendations.

• Strong understanding of current application vulnerabilities, especially the OWASP Top 10 and CWE Top 25.

• Hands-on experience with both commercial and open-source penetration testing tools, including Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, CANVAS, SQLMap, and Empire.

• Capability to support client projects and assignments, write comprehensive reports, and develop presentations for non-technical audiences.

• Solid knowledge of Linux and Windows operating systems.

• Familiarity with programming languages such as Python, PowerShell, or Ruby.

• Understanding of penetration-testing methodologies and standards, including PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, and CVSS.

• Advanced proficiency in English is required.

• Ethical hacker mindset with a keen interest in cybersecurity.

• Expertise in using offensive security tools like Qualys, Nessus, and Nmap.

• Proficiency in web application assessments utilizing Burp Suite, SQLMap, and OWASP ZAP.

• Excellent oral and written communication, collaboration, and report-writing skills.

• Experience interacting with clients from various business sectors and organizational types.

• Ability to analyze complex issues and articulate them clearly and logically.

• Additional desirable qualifications: hands-on field experience; IoT security knowledge; more than 8 years in information technology; a university degree or equivalent in a relevant field; experience in social engineering and wireless security testing; professional certifications or a willingness to pursue them; familiarity with GRC standards; contributions to open-source projects; experience in CTF or bug bounty initiatives; software development skills; familiarity with AWS, Azure, or GCP; bilingual in French and English; certifications such as GWAPT, GPEN, OSCE, CSSLP, or ECSA.

🏝️ Benefits

• 15% Performance Bonus or Sales Incentive Plan.

• Flexible mobile/remote work environment.

• Competitive compensation packages customized to the level of experience and expertise.

• Accommodation for candidates with disabilities throughout the recruitment process.