Analyste en sécurité des produits chez Alithya, intégrant la sécurité de l’information aux projets technologiques. Évaluation des risques, recommandations et suivi des mesures de sécurité.
About the role
- Offensive Security Analyst responsible for intrusion tests and enhancing security posture at iA Financial Group. Collaborating with teams to document findings and improve detection mechanisms.
Responsibilities
- plan and perform intrusion tests on web applications, APIs, cloud environments, internal infrastructures
- set up and participate in purple team exercises simulating real attack scenarios
- collaborate with defensive teams to validate controls and improve detection mechanisms
- document findings, provide remediation recommendations, and present results to stakeholders
- stay informed about emerging threats, tools, and techniques in offensive security
- work with a high degree of autonomy and initiative
Requirements
- 3 to 5 years of experience in offensive security
- 7 years of experience in information technology (IT)
- knowledge of the OWASP Top 10, MITRE ATT&CK, and threat-modeling frameworks
- ability to perform intrusion tests on various infrastructures
- proficiency with offensive security tools such as Burp Suite, Nmap, Nessus, BloodHound, Metasploit, Cobalt Strike
- strong ability to communicate technical concepts clearly
- intermediate level of English and French proficiency
- certifications such as OSCP, OSWE, OSEP, CRTP, GPEN, CPTS are strong assets
- experience in scripting (Python, Bash, PowerShell) for automation and exploit development
- experience with Infrastructure as Code, such as Terraform
- background in networking or software development
Benefits
- flexible group insurance
- competitive pension plan
- employee share purchase plan
- vacation and wellness/personal development days
- telemedicine
- employee and family assistance program
- ergonomic equipment program
- performance bonus
- discounts on iA products
- a healthy, safe, fair, and inclusive environment
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Intermediate SOC Analyst monitoring and responding to security incidents for Long View, a North American IT provider. Managing SIEM tools, cloud environments, escalations, and 24x7 operations.
LP
Security Specialist – IT Audit
LinkedIn Recruiter Post
Security Specialist - IT Audit needed for a banking client. 6 - month contract, hybrid in Toronto/Mississauga, requires 10+ years experience and CISA.
LP
Senior IT Security Specialist (GRC / IT Audit / Remediation Validation)
LinkedIn Recruiter Post
Senior IT Security Specialist (GRC/IT Audit) needed for hybrid role in Toronto/Mississauga. 10+ years experience, CISA required.
Security Analyst triaging bug bounty vulnerabilities for Stripe’s financial infrastructure platform. Driving researcher engagement, remediation coordination, vulnerability analysis, and bug bounty program improvements.
Azure AD Security Analyst leading identity and access management for Intact, a Canadian insurer. Integrating Azure AD, supporting IAM architecture, automation, privileged access, and major incidents.
Analyste sécurité informatique chez Beneva, compagnie d’assurance et de services financiers. Intégration des contrôles IAM, analyse des exigences de sécurité et accompagnement des équipes applicatives.
Security Analyst leading Cyber Threat Exposure Management transformation for iA Financial Group, a Canadian insurance and wealth - management provider. Coordinating risk reduction, governance, and cross - functional CTEM initiatives.
Cybersecurity Compliance Analyst supporting Ledcor’s diversified construction business. Managing control assessments, audits, vendor cyber risk, and regulatory compliance reporting.
Senior Security Risk Analyst at Twilio enhancing security risk management and collaborating with cross - functional teams. Focused on identifying and mitigating cyber risks effectively and ensuring compliance.