Consultant, Offensive Security

Kroll • Toronto, ON

2d • CA$90,000 - CA$110,000

About The Position

Our Offensive Security professionals are on a mission to make the world a safer place, one company at a time. We believe that our work to help our clients discover and remediate their unique security risks makes every one of us safer. Our clients trust us to use cutting-edge offensive security tools, creativity, imagination, and expert knowledge to find cybersecurity risks in their networks, systems, and software. We're looking to grow our team of penetration testers in Canada. We perform testing of computer networks, web and smartphone applications, cloud infrastructure, hardware devices, employees via social engineering, organizations via red team testing, and more. At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges. Apply now to join One team, One Kroll.

Requirements

• Bachelor’s degree or college diploma in information security, computer science or engineering, or IT/System/Network administration
• 3+ years in cybersecurity, with at least 2 years in network penetration testing
• Strong understanding of Windows, Active Directory, Linux, networking, and security architecture
• Knowledge of network concepts including routing, switching, VLANs, firewalls, ACLs, VPNs, and segmentation
• Familiarity with security technologies such as IDS/IPS, EDR, SIEM, DLP, and endpoint security platforms
• A strong understanding of offensive security methodology and vulnerability frameworks such as the OWASP Testing Guide, MITRE ATT&CK, PTES, or others
• Experience with common offensive security tools including nmap, Nessus, Kali Linux, Burp Suite, PowerShell
• An ability to analyze root causes and deliver technological recommendations to our clients
• Excellent oral and written communication skills
• Experience working both as part of a team and independently

Nice To Haves

• Certifications such as OSCP, SANS GPEN, Cisco CCNA, CompTIA Network+, OSWE, SANS GWAPT, CREST CPSA, or CREST CRT, are an asset

Responsibilities

• Execute offensive security and consultative engagements for our clients’ network infrastructure and applications
• Author deliverables such as vulnerability reports and executive reports
• Engage with our clients to understand their requirements, update them on project status, answer their queries, and present your findings and recommendations
• Update your skills and knowledge with the latest trends in cybersecurity and emerging technology

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level