Desjardins Red Team advisor conducting adversary simulations and offensive cybersecurity operations. Developing stealth tools, attack chains and tradecraft to strengthen cyber defence.
Responsibilities
Perform adversary simulation and threat monitoring activities
Protect IT hardware, software and data against modification, destruction and accidental or unauthorized disclosure
Assist in authentication and access control by designing, administering and controlling proven security systems
Analyze IT system vulnerabilities and implement protective measures to back up, restore and secure systems
Lead practitioners on development projects and innovative, complex strategic initiatives
Develop IT security standards and policies
Make recommendations on complex projects and initiatives
Lead large-scale development projects, initiatives and activities with significant organizational impact
Advise clients and partners on positioning, planning, development, solution selection, execution and monitoring of strategic projects
Develop and update policies, standards, models and programs
Identify and analyze major issues, diagnose issues and make recommendations to decision-making bodies
Represent the unit before decision-making bodies
Represent Desjardins in agreements with external partners and organizations
Design, develop and implement attack chains for different levels of sophistication
Perform research and development to maintain and contribute to the team’s tradecraft
Work with cyber defence and insider threat teams to improve prevention, detection and response capabilities
Document and communicate detailed observations and recommendations in plain, simple language
Serve as specialist advisor, subject matter expert, resource person and coach for decision-making bodies
Requirements
Bachelor's degree in a related field
A minimum of six years of relevant experience
Please note that other combinations of qualifications and relevant experience may be considered
Strong oral and written communication skills in French
Expertise in offensive security as a Red Team operator and/or with stealth pentesting
Expertise in developing creative stealth tools and automating tasks in various programming languages
Expertise in operating with C2
Expertise in implementing and maintaining infrastructure with Terraform/Ansible
Proficiency in application security and infrastructure operations
General knowledge of defence mechanisms and business controls
Working knowledge of the MITRE ATT&CK framework
Knowledge of modern evasive techniques (for example, antivirus, EDR, NDR)
Expert en stratégie numérique d’identité et sécurité chez Beneva, assureur et fournisseur de services financiers. Définit la feuille de route d’authentification, de validation d’identité et de gestion des accès.
Head of Security leading Super.com's AI - first security program and enterprise risk strategy. Building security teams, protecting financial technology products, and partnering with executives and the board.
Security Consultant II integrating Akamai security products for government agencies. Advising customers, tuning web security solutions, and improving delivery methodologies.
Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.
Workshop Director delivering cybersecurity and IT advisory workshops for Info - Tech Research Group. Leading client assessments, recommendations, research contributions, and AI capability development.
Senior Security Consultant guiding Akamai customers through security integrations and support. Delivering trusted technical consultancy across the company’s cloud, edge, and security products.
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.