Conduct reconnaissance on network environment to build external landscape using industry standard tools, threat intelligence feeds, OSINT and other readily available information sources
Conduct offensive security testing to ensure security controls and response actions are effective.
Employ attack strategies to simulate real-world attacks by threat actors and benchmark response capabilities across the enterprise.
Ability to identify and exploit vulnerabilities in computer systems, networks and applications to simulate attacks by threat actors
Analyze and report on the results of security assessments and make recommendations to improve the security posture of the enterprise.
Work with regional cyber governance and risk teams to ensure that findings are properly tracked for remediation
Generate the required metrics and reports to support the CISO IFC Affiliates in reporting on enterprise security control effectiveness

Requirements

Bachelor's degree in Computer Technology, Information Security, an asset.
A minimum of five (5) years of relevant professional experience in information technology.
A minimum of three (3) years of experience in information security.
Knowledge of offensive security operations, tools and techniques.
Knowledge of information security standards, regulations and legislation (NIST, COBIT5, ISO 27001), an asset.
Python scripting comes naturally, and have a history of using it in blue/red/purple team engagements.
Proficiency in manual testing techniques beyond automated scanning.
Strong knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
Recognized certification in information security (CEH, CISM or other), an asset.

Benefits

Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

offensive security testingvulnerability identificationnetwork reconnaissancePython scriptingmanual testing techniquesOWASP Top 10MITRE ATT&CKCVSS scoringthreat intelligenceOSINT

Certifications

CEHCISM