Hybrid Security Advisor Specialist, Offensive Security – Global Red Team

at Intact

• Job title: Security Advisor Specialist, Offensive Security – Global Red Team
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: CA$118,700 - CA$145,100 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Python
• Location requirements: Hybrid, Toronto, Canada

About the role

• Security Advisor Specialist testing security controls and responding to threats for Intact Financial globally. Collaborating with a global team to strengthen security measures across the enterprise.

Responsibilities

• Conduct reconnaissance on network environment to build external landscape using industry standard tools, threat intelligence feeds, OSINT and other readily available information sources
• Conduct offensive security testing to ensure security controls and response actions are effective.
• Employ attack strategies to simulate real-world attacks by threat actors and benchmark response capabilities across the enterprise.
• Ability to identify and exploit vulnerabilities in computer systems, networks and applications to simulate attacks by threat actors
• Analyze and report on the results of security assessments and make recommendations to improve the security posture of the enterprise.
• Work with regional cyber governance and risk teams to ensure that findings are properly tracked for remediation
• Generate the required metrics and reports to support the CISO IFC Affiliates in reporting on enterprise security control effectiveness

Requirements

• Bachelor's degree in Computer Technology, Information Security, an asset.
• A minimum of five (5) years of relevant professional experience in information technology.
• A minimum of three (3) years of experience in information security.
• Knowledge of offensive security operations, tools and techniques.
• Knowledge of information security standards, regulations and legislation (NIST, COBIT5, ISO 27001), an asset.
• Python scripting comes naturally, and have a history of using it in blue/red/purple team engagements.
• Proficiency in manual testing techniques beyond automated scanning.
• Strong knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
• Recognized certification in information security (CEH, CISM or other), an asset.

Benefits

• Flexible work arrangements and a hybrid work model
• Possibility to purchase up to 5 extra days off per year
• Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
• Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)