Data Center Security Officer securing Salute’s critical infrastructure facilities. Conducting patrols, access control, surveillance, incident response, and emergency support.
About the role
- Senior Security Specialist operating BloodHound Enterprise for RBC, a Canadian bank. Mapping identity attack paths and prioritizing remediation across cloud, AD, DevOps, and PAM environments.
Responsibilities
- Operate and continuously tune BloodHound Enterprise to map identity attack paths across on-prem AD, Entra/Azure, AWS, GCP, DevOps, and PAM platforms
- Analyze attack path data to identify choke points and Tier Zero exposures, prioritizing remediation by real-world exploitability and business impact
- Validate data collection accuracy and ensure attack path fidelity
- Extend attack path coverage into CI/CD pipelines, secrets management, IAM tooling, and other platforms with OpenHound
- Help design custom collectors to enrich BloodHound attack path data beyond out-of-the-box coverage
- Assist the Red Team in building realistic attack paths for covert operations and adversary emulation exercises
- Build relationships with Cloud Engineering, Cloud Security, IAM, Threat Detection, and Incident Response teams
- Communicate attack path exposure, remediation progress, and identity risk trends to cloud operations, internal customers, the SOC, IR, and business stakeholders
- Work in complex and critical environments that power the economy
- Collaborate with offensive, defensive, and threat hunting security experts to refine and expand skills
Requirements
- 3+ years of on-premises and cloud security/engineering experience with Active Directory and Entra/Azure, AWS, or GCP in enterprise environments
- Understanding of DevOps/CI-CD tooling (Jenkins, GitHub Actions, Terraform, CloudFormation, Ansible, or similar)
- Proficiency in BloodHound Ciphers and PowerShell, C#, or Python, with the ability to build or adapt tools and automation
- Familiarity with containerized environments (e.g., Kubernetes) and associated RBAC/security implications
- Solid understanding of network protocols, identity and access management, and common misconfigurations across AD, cloud, and DevOps environments
- Experience working in or supporting Red, Blue, and/or Purple Team operations in enterprise settings
- Working knowledge of Linux and Windows operating systems
- Familiarity with MITRE ATT&CK, threat emulation frameworks (Caldera, Atomic Red Team), and purple teaming methodologies
- Ability to reverse-engineer or emulate TTPs from threat intel reports
- Ability to analyze and identify complex cross-platform attack vectors
- Hands-on experience with AD and/or cloud-focused penetration testing, threat simulation, or detection/response in regulated or complex production environments
- PaaS/SaaS operational know-how, including SLAs, load balancing, high availability, OS patching, networking, and security patch management
- Offensive/defensive security certifications or cloud security specialties are nice-to-have
- BloodHound Operator Certification (BHOC) is nice-to-have
- Above average performance; competitive and passionate; ability to set ambitious but achievable goals and surpass them
- Proven ability to build, grow, and maintain relationships both internally and externally
Benefits
- Comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
- Dedicated budget for annual training and conference attendance
- Leaders who support your development through coaching, training, and managing opportunities
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- Flexible work/life balance options including a hybrid-remote working environment
- Opportunities to do challenging work
- Opportunities to take on progressively greater accountabilities
- Opportunities to build close relationships with various cyber security teams
- Opportunity to attend industry-leading public and private training sessions
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Head of Information Security leading OpenZeppelin’s enterprise security, privacy, IT, and AI governance programs. Securing open - source infrastructure used across onchain finance and digital assets.
Red Team Security Engineer evaluating Motive's fleet - management platform and cloud environments. Executing adversary simulations, validating detection coverage, and driving remediation of security issues.
Security Specialist securing AXON Networks’ AI - driven ISP orchestration platform, cloud infrastructure and connected networking devices. Managing vulnerability scanning, CVE validation, risk prioritization and remediation.
Information Systems Security Manager securing RideCo’s cloud - based on - demand transit platform. Leading compliance, risk management, incident response, and security operations.
Staff Cyber Security Engineer securing NBCUniversal’s media, streaming, and entertainment technology. Conducting threat analysis and guiding network, application, cloud, and enterprise security controls.
Senior Security Specialist securing RBC’s cloud banking environments across AWS, Azure, and Google Cloud. Executing red/purple team exercises and refining offensive security tooling.
Staff Security Researcher conducting vulnerability research and penetration testing for GitLab’s AI - powered DevSecOps platform. Developing attack methodologies, tooling, and security improvements.
Principal Security Researcher securing GitLab’s AI - powered DevSecOps platform. Leading vulnerability research, AI attack analysis, penetration testing, and remediation across GitLab’s codebase.
Senior security advisor strengthening Desjardins's security posture across governance, data protection, and fraud prevention. Leading complex strategic initiatives for the Desjardins financial services organization.