Senior Security Consultant

Jobs by Category: Security & AutomationJob Function: TechnologyStatus: Full TimeSchedule: RegularDescription
Join our teamPrevent. Protect. Prevail. We live in a fast-paced cyber-world where protecting our information has become paramount. At TELUS Cyber Security, we strive to always be steps ahead, tackling the toughest security challenges head-on with top talent and cutting edge technology. Define your career today as a Senior Consultant with our Security Professional Services team!Here’s the impact you’ll make and what we’ll accomplish together
Reporting to the Principal, Cyber Security Professional Services as part of the TELUS Cyber Security Professional Services team, Senior Consultant, Penetration Testing supports client security testing engagements.
If you possess extensive experience in offensive security and penetration testing and its underlying principles and have strong working experience in the field with current, effective and advanced technical skills in web application security, infrastructure testing, cloud security, vulnerability management, red/blue team engagements and making recommendations for remediation, this role might be just for you!Here’s How
You are proficient with current application vulnerabilities, particularly those listed in the OWASP Top 10 and CWE Top 25You have practical expertise with commercial and open-source intrusion testing tools (e.G.: Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, CANVAS, SQLMap, Empire, etc.)You are able to support client projects and mandates, write reports and prepare presentations, leveraging your communication skills to popularize technical findings to a non-specialized audienceYou have good knowledge of Linux and Windows operating systemsYou have some experience with programming languages (Python, PowerShell, Ruby or other relevant languages)You are familiar with industry standard methodologies and standards in penetration testing (PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, CVSS, etc.)Advanced knowledge of English is required because you will most of the time interact in English with external parties (clients, suppliers, candidates, external partners, etc.);
interact in English with internal parties (colleagues, internal partners, stakeholders, etc.);
and work with IT tools whose interface is only accessible in English as part of this position’s main responsibilities given its national scope.Qualifications
What you bringYou have 5+ years of experience in penetration testing, development and/or technical support in cybersecurityCybersecurity is your passion and you have an "ethical hacker" mindsetYou want to evolve in a dynamic, innovative and modern technological environmentYou master offensive security tools such as Qualys, Nessus, Nmap and othersYou are comfortable with web application assessment using Burp Suite, SQLMap and OWASP ZapYou want to join a team that performs infrastructure and web application security assessments, both automated and manualYou show strong interest in continuous learning of new technologiesYou have strong oral and written communication skills, collaborative spirit and report writing abilitiesYou have experience working with clients from various business sectors and types of organizationsYou are capable of analyzing complex problems and discussing them in a simple, logical and thoughtful mannerNice-to-havesConcrete practical experience in the fieldUnderstanding of Internet of Things (IoT) securityAt least 8 years of experience in information technologiesUniversity degree or equivalent experience in a relevant disciplineKnowledge of social engineering techniques and wireless security testingProfessional certifications (e.G.: OSCP) or willingness to obtain themBasic knowledge of GRC (Governance, Risk and Compliance) standardsContributions to open-source projectsExperience with CTF (Capture The Flag) competitions and/or "bug bounty" programsKnowledge of current cloud infrastructures (AWS, Azure, GCP, etc.)Bilingualism (French and English)Certifications (Nice-to-haves)Offensive Security Certified Expert (OSCE)Certified Secure Software Lifecycle Professional (CSSLP)Certified Security Analyst (ECSA)Please note:
This position is a mobile/remote work setting.The successful candidate will be required to undergo a security check and may need to meet eligibility requirements for access to classified information.Salary Range: $86,000-$136,000Performance Bonus or Sales Incentive Plan: 15%Actual total compensation will be determined based on factors such as knowledge, skills, performance and experience. We encourage all qualified candidates to apply, even if the posted salary range doesn't match your expectations. We're open to discussing competitive compensation packages tailored to your experience level and expertise.Job Type: This is for a current vacancyA bit about us
We’re a people-focused, customer-first, purpose-driven team who works together every day to innovate and do good. We improve lives through our technology solutions and foster a culture of innovation that empowers team members to solve complex problems and create remarkable human outcomes in a digital world.You’ll find our engaging, high-performance culture personally fulfilling, professionally challenging, and financially rewarding. We’re committed to diversity and equitable access to employment opportunities based on ability. Your unique contributions and talents will be valued and respected here. When you join our team, you’re helping us make the future friendly.Note for Quebec candidates: if knowledge of English is required for this position, it is because the team memberwill be asked, on a regular basis, to interact in English with external or internal parties or to use English applications or software as part of their tasks.Cybersecurity
We're passionate about driving cyber resilience and rapidly adapting to the evolving cyber threat landscape. If you've ever envisioned what the future of enterprise security looks like, visualized cutting-edge strategies to better protect emerging technologies (including AI) and enjoy driving programs that reduce cyber risk as part of a highly engaged Canadian cybersecurity team, we want you to be part of the organization that makes it happen.We are honoured to be recognizedTeam TELUS at a glance
1.4MDays volunteered in our communities$1.3Billion contributed to charitable and community organizations since 200015.2Million customer connectionsAccessibility
TELUS is proud to foster an inclusive culture that embraces diversity. We are committed to fair employment practices and all qualified applicants will receive consideration for employment.We offer accommodation for applicants with disabilities, as required, during the recruitment process.
#J-18808-Ljbffr