Penetration Tester

RBC • Vancouver, BC

3d • Onsite

About The Position

The Application Security team is undertaking multiple complex enterprise-wide initiatives to improve the security and quality of RBC applications. Reporting to the Senior Manager of Penetration Testing, you will provide application penetration testing services for the global RBC business and application development teams across all enterprise information technology groups. You will act as the subject matter expert in execution of penetration testing, in addition to participating in the development of application security best practices, tools, processes, and landscapes. You will also provide technical input on current, interim and target state penetration testing and security processes, and communicate the needs of development teams to strategic security leadership.

Requirements

• 4+ years of experience in executing application layer penetration testing exercises
• Strong understanding of web, mobile, and AI application architecture and development principles
• Strong knowledge of OWASP, SANS or other security-related frameworks
• Current experience with modern application layer penetration testing tooling and platforms
• Hands-on experience in software and/or script development
• Exemplary communication skills, both written and verbal
• Curious mindset

Nice To Haves

• OSCP, OSCE, GWAPT, GMOB, GXPN certifications an asset
• Experience in testing network systems and cloud services (e.g. AWS, Azure)
• Experience providing pen testing services in a highly regulated environment (e.g. Financial Institutions, Insurance, Government, etc.)

Responsibilities

• Perform penetration testing against application landscapes (Web, API, mobile, AI)
• Ensure applications & infrastructure are methodically and thoroughly tested using industry best practices prior to promotion to production
• Prepare and deliver clear, concise, and impactful reporting to stakeholders
• Educate stakeholders (e.g. developers, security consultants, executives) on application security matters and impacts on the organization
• Research and keep up to date on security emerging threats, techniques, tools, and trends

Benefits

• bonuses
• flexible benefits
• competitive compensation
• commissions
• stock where applicable
• Leaders who support your development through coaching and managing opportunities
• A world-class training program in financial services
• Flexible work/life balance options

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed