Senior Security Consultant in Montréal

Join our team at TELUS Cyber Security, where we strive to always be steps ahead in tackling the toughest security challenges with top talent and cutting-edge technology.

As a Senior Consultant, Penetration Testing, you will support client security testing engagements. If you possess extensive experience in offensive security and penetration testing, along with strong technical skills in web application security, infrastructure testing, cloud security, vulnerability management, and red/blue team engagements, this role might be for you!

Here’s How:

• You are proficient with current application vulnerabilities, particularly those listed in the OWASP Top 10 and CWE Top 25.
• You have practical expertise with commercial and open-source intrusion testing tools (e.g., Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, SQLMap).
• You can support client projects, write reports, and prepare presentations, leveraging your communication skills to convey technical findings to a non-specialized audience.
• You have good knowledge of Linux and Windows operating systems.
• You have some experience with programming languages (Python, PowerShell, Ruby or other relevant languages).
• You are familiar with industry standard methodologies and standards in penetration testing (PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, CVSS).
• Advanced knowledge of English is required as you will interact with external and internal parties and work with IT tools whose interface is only accessible in English.

Qualifications:

• You have 5+ years of experience in penetration testing, development, and/or technical support in cybersecurity.
• Cybersecurity is your passion and you have an 'ethical hacker' mindset.
• You want to evolve in a dynamic, innovative, and modern technological environment.
• You master offensive security tools such as Qualys, Nessus, Nmap, and others.
• You are comfortable with web application assessment using Burp Suite, SQLMap, and OWASP Zap.
• You want to join a team that performs infrastructure and web application security assessments, both automated and manual.
• You show strong interest in continuous learning of new technologies.
• You have strong oral and written communication skills, collaborative spirit, and report writing abilities.
• You have experience working with clients from various business sectors and types of organizations.
• You are capable of analyzing complex problems and discussing them in a simple, logical, and thoughtful manner.

Nice-to-haves:

• Concrete practical experience in the field.
• Understanding of Internet of Things (IoT) security.
• At least 8 years of experience in information technologies.
• University degree or equivalent experience in a relevant discipline.
• Knowledge of social engineering techniques and wireless security testing.
• Professional certifications (e.g., OSCP) or willingness to obtain them.
• Basic knowledge of GRC (Governance, Risk and Compliance) standards.
• Contributions to open-source projects.
• Experience with CTF (Capture The Flag) competitions and/or 'bug bounty' programs.
• Knowledge of current cloud infrastructures (AWS, Azure, GCP).
• Bilingualism (French and English).

Certifications (Nice-to-haves):

• Offensive Security Certified Expert (OSCE).
• Certified Secure Software Lifecycle Professional (CSSLP).
• Certified Security Analyst (ECSA).

Please note: This position is a mobile/remote work setting. The successful candidate will be required to undergo a security check and may need to meet eligibility requirements for access to classified information.

Salary Range: $86,000-$136,000. Performance Bonus or Sales Incentive Plan: 15%. Actual total compensation will be determined based on factors such as knowledge, skills, performance, and experience.

A bit about us: We’re a people-focused, customer-first, purpose-driven team who works together every day to innovate and do good. We improve lives through our technology solutions and foster a culture of innovation that empowers team members to solve complex problems and create remarkable human outcomes in a digital world.

We’re committed to diversity and equitable access to employment opportunities based on ability. Your unique contributions and talents will be valued and respected here.