Sr Security Cnslt

TELUS•Vancouver, BC

About The Position

We operate in a cyber world where protecting our information has become a top priority. At TELUS Cyber Security, we constantly aim to stay one step ahead, tackling the most complex security challenges with our top talent and cutting-edge technologies. Chart your career path today as a Security Consultant within our Professional Security Services team! Your impact and what we will achieve together Reporting to the Offensive Security Manager within the TELUS Cyber Security Professional Services team, the Security Consultant II – Penetration Testing supports security testing mandates for our clients. If you have intermediate-level experience in offensive security and penetration testing, an understanding of their fundamental principles, and a solid practical experience with current, effective, and sharp technical skills in web application security, infrastructure testing, cloud security, vulnerability management, attack simulations (red/blue teams), and formulating corrective recommendations, this position is for you!

Requirements

5+ years of experience in penetration testing, development, and/or technical support in cybersecurity
Passionate about cybersecurity and adopt an "ethical hacker" mindset
Desire to evolve in a dynamic, innovative, and modern technological environment
Proficiency with offensive security tools such as Qualys, Nessus, Nmap, and others
Comfortable with web application assessment using Burp Suite, SQLMap, and OWASP Zap
Desire to join a team that conducts security assessments of infrastructures and web applications, both automated and manual
Strong interest in continuous learning of new technologies
Strong oral and written communication skills, collaborative spirit, and report writing abilities
Experience working with clients from various sectors and types of organizations
Ability to analyze complex problems and discuss them in a simple, logical, and thoughtful manner
Ability to manage multiple projects simultaneously, manage time effectively, and work with minimal supervision
Valid Secret II level security clearance or the ability to obtain it (mandatory)

Nice To Haves

Hands-on practical experience in the field
Understanding of Internet of Things (IoT) security
At least 8 years of experience in information technology
University Bachelor's degree or equivalent experience in a relevant discipline
Knowledge of social engineering techniques and wireless security testing
Professional certifications (e.g., OSCP) or willingness to obtain them
Basic knowledge of GRC (Governance, Risk, and Compliance) standards
Contributions to open-source projects
Experience with CTF (Capture The Flag) competitions and/or bug bounty programs
Software development experience
Knowledge of common cloud infrastructures (AWS, Azure, GCP, etc.)
Bilingualism (French and English)
Certifications (Considered assets): Offensive Security Certified Professional (OSCP), Certified Red Team Operator (CRTO), GIAC Web Application Penetration Tester (GWAPT), GIAC Certified Penetration Tester (GPEN), Offensive Security Certified Expert (OSCE), Certified Secure Software Lifecycle Professional (CSSLP), Certified Security Analyst (ECSA)

Responsibilities

Mastery of common application vulnerabilities, including those listed in the OWASP Top 10 and CWE Top 25
Practical expertise with commercial and open-source penetration testing tools (e.g., Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, CANVAS, SQLMap, Empire, etc.)
Support client projects and mandates, write reports, and prepare presentations, leveraging your communication skills to simplify technical findings for a non-specialized audience.
Good knowledge of Linux and Windows operating systems
Programming skills (Python, PowerShell, Ruby, or other relevant languages)
Knowledge of recognized penetration testing methodologies and standards (PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, CVSS, etc.)

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume