Verified Job
IT / Software / Data Analyst
Senior Offensive Security Advisor- job post Desjardins
IT / Software / Data Analyst
#758877
Remote / WFH
Desjardins
Job Description
Full job description
The Attack Simulation Offensive Security Department is looking for a senior advisor to join the full-scope Cross-Sector Intrusion Testing Team. This team simulates high-impact attack scenarios for the organization. The team works without a fixed scope so it can better identify the most efficient ways to run through defined scenarios, with mandates running from one to three months. In this role, you will collaborate closely with teams focused on cyber defence, internal threats, development, architecture and continuous delivery. You’ll assess cybersecurity risks from different angles and help to build the organization’s defensive capacity. As a Senior Offensive Security Advisor, you help identify, analyze and mitigate threats to Desjardins Group’s external systems, networks and apps. You plan for new threats based on the continuous development of offensive techniques and threat actors. You will serve as an expert leader in carrying out high-impact strategic offensive mandates and will play an influential role with everyone involved to help implement the proposed recommendations. You make recommendations on the development and execution of projects and initiatives with a high degree of operational and conceptual complexity. There will be a number of initiatives to align and coordinate, and interpersonal savvy is therefore essential. More specifically, you will be required to:
Leverage advanced penetration techniques, expert knowledge in network security, web applications, source code analysis, corporate controls and identity management.
Identify and exploit system vulnerabilities or weaknesses in a rigorous and ethical manner, demonstrating creativity and innovation.
Act as an offensive security expert to support, advise and catalyze change to strengthen Desjardins Group’s protection against cyberattacks.
Design, develop, implement and document effective, adapted and precise methodologies and tools, while mitigating the risks associated with their execution.
The Attack Simulation Offensive Security Department is looking for a senior advisor to join the full-scope Cross-Sector Intrusion Testing Team. This team simulates high-impact attack scenarios for the organization. The team works without a fixed scope so it can better identify the most efficient ways to run through defined scenarios, with mandates running from one to three months. In this role, you will collaborate closely with teams focused on cyber defence, internal threats, development, architecture and continuous delivery. You’ll assess cybersecurity risks from different angles and help to build the organization’s defensive capacity. As a Senior Offensive Security Advisor, you help identify, analyze and mitigate threats to Desjardins Group’s external systems, networks and apps. You plan for new threats based on the continuous development of offensive techniques and threat actors. You will serve as an expert leader in carrying out high-impact strategic offensive mandates and will play an influential role with everyone involved to help implement the proposed recommendations. You make recommendations on the development and execution of projects and initiatives with a high degree of operational and conceptual complexity. There will be a number of initiatives to align and coordinate, and interpersonal savvy is therefore essential. More specifically, you will be required to:
Leverage advanced penetration techniques, expert knowledge in network security, web applications, source code analysis, corporate controls and identity management.
Identify and exploit system vulnerabilities or weaknesses in a rigorous and ethical manner, demonstrating creativity and innovation.
Act as an offensive security expert to support, advise and catalyze change to strengthen Desjardins Group’s protection against cyberattacks.
Design, develop, implement and document effective, adapted and precise methodologies and tools, while mitigating the risks associated with their execution.
