Offensive Security Analyst responsible for intrusion tests and enhancing security posture at iA Financial Group. Collaborating with teams to document findings and improve detection mechanisms.
Responsibilities
plan and perform intrusion tests on web applications, APIs, cloud environments, internal infrastructures
set up and participate in purple team exercises simulating real attack scenarios
collaborate with defensive teams to validate controls and improve detection mechanisms
document findings, provide remediation recommendations, and present results to stakeholders
stay informed about emerging threats, tools, and techniques in offensive security
work with a high degree of autonomy and initiative
Requirements
3 to 5 years of experience in offensive security
7 years of experience in information technology (IT)
knowledge of the OWASP Top 10, MITRE ATT&CK, and threat-modeling frameworks
ability to perform intrusion tests on various infrastructures
proficiency with offensive security tools such as Burp Suite, Nmap, Nessus, BloodHound, Metasploit, Cobalt Strike
strong ability to communicate technical concepts clearly
intermediate level of English and French proficiency
certifications such as OSCP, OSWE, OSEP, CRTP, GPEN, CPTS are strong assets
experience in scripting (Python, Bash, PowerShell) for automation and exploit development
experience with Infrastructure as Code, such as Terraform
Security Analyst at EXFO monitoring threats and responding to incidents for IT systems. Collaborating with IT teams to enhance cybersecurity measures with diverse client environments.
Provide IT support and security analysis for MaRS users. Diagnosing and resolving technical issues while ensuring secure access to IT services and applications.
SAP Security Analyst and Junior Security Analyst roles ensuring ERP system security for the Government of Alberta. Lead security controls, collaborate with teams and resolve access issues.
Join TD as an Information Security Analyst focusing on audit response and controls implementation. Contribute to enhancing compliance and security solutions in an agile environment.
IT Security Analyst monitoring Stantec’s systems for signs of intrusion and security incidents. Collaborating with IT Security team for compliance and remediation effort.
Security Analyst safeguarding networks and systems at PointClickCare using AI for enhanced security operations and incident response. Responsible for implementing security measures to protect data centers and cloud deployments.
6 - month contract, 3 days onsite in Scarborough. Focus on vulnerability management, incident response, and security gap analysis across Azure AD, O365, and on - prem.