Business Analyst, Cybersecurity

BDO • Toronto, ON

5d • Hybrid

About The Position

We are seeking a Cybersecurity Consultant, working from anywhere in Canada, to join the BDO team and own the following responsibilities, supporting the Cyber Offensive Security delivery team: Participating in Application & Network Penetration Tests, assessing customer environments and custom applications for vulnerabilities and defects. Participating in Red-Team and Adversary Simulation exercises, leveraging advanced techniques to discover potential vulnerabilities in an organization’s people, process, procedure as well as technology stack. Leveraging Social Engineering, Hardware Hacking, Network Implants, Physical Bypass techniques and various evasion capabilities in Physical Site Penetration Testing. Contributing to Research and Development in new exploitation techniques as well as strategies to deliver client engagements with enhanced effectiveness and efficiency. Authoring detailed and accurate reports with a high level of quality to be consumed by technical and non-technical audiences. Contributing to Thought Leadership articles, publications and presentations used in BDO events as well as industry conferences. Interfacing with client delegates, ensuring testing and assessment projects run smoothly and requirements are met. Working with clients to ensure they understand the impact to the Confidentiality, Integrity, and Availability of their organization from assessment findings.

Requirements

• Bachelor’s degree or Advanced Diploma in Cybersecurity or related technology centric path.
• Demonstrated interest and dedication to the Cyber Security career path shown through related extra-curricular activities.
• Completion, or progress made towards completing a relevant Offensive Security certification such as OSCP, CRTP, eWPT, GPEN etc.
• Participation in Bug Bounty Programs, CTF Tournaments, industry events etc.
• Literacy in scripting languages such as Python, Ruby, Powershell etc.
• Strong oral and written skills in report and documentation writing.
• Ability to gain/maintain Federal Security Clearance
• You must be located in Canada to be eligible for this opportunity.

Nice To Haves

• Conceptual understanding or experience performing Risk Assessments against industry frameworks.
• Understanding of Application Security Concepts such as SAST, DAST and SCA.
• Understanding of SOC concepts, responsibilities, and toolsets (blue team operations).
• Cloud Security Engineering capabilities in Azure, AWS and GCP.

Responsibilities

• Participating in Application & Network Penetration Tests, assessing customer environments and custom applications for vulnerabilities and defects.
• Participating in Red-Team and Adversary Simulation exercises, leveraging advanced techniques to discover potential vulnerabilities in an organization’s people, process, procedure as well as technology stack.
• Leveraging Social Engineering, Hardware Hacking, Network Implants, Physical Bypass techniques and various evasion capabilities in Physical Site Penetration Testing.
• Contributing to Research and Development in new exploitation techniques as well as strategies to deliver client engagements with enhanced effectiveness and efficiency.
• Authoring detailed and accurate reports with a high level of quality to be consumed by technical and non-technical audiences.
• Contributing to Thought Leadership articles, publications and presentations used in BDO events as well as industry conferences.
• Interfacing with client delegates, ensuring testing and assessment projects run smoothly and requirements are met.
• Working with clients to ensure they understand the impact to the Confidentiality, Integrity, and Availability of their organization from assessment findings.

Benefits

• Competitive total cash compensation that recognizes and rewards your contribution.
• Flexible benefits from day one.
• Market leading personal time off policy.
• Reimbursement for wellness initiatives that fit your lifestyle.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree