Job Description

Senior Penetration Tester

Location: Toronto, Canada [Remote]

Job Type: Permanent

Job Description:

We are seeking a highly experienced and skilled Senior Penetration Tester to join our cybersecurity team at Informa Solutions Ltd. The successful candidate will take the lead in conducting comprehensive penetration testing and vulnerability assessments to identify and mitigate potential threats to our client's systems and data.

Responsibilities:

1. Conduct penetration tests and vulnerability assessments on web applications, network infrastructure, and other systems for our clients.
2. Identify and exploit vulnerabilities to gauge the potential impact on client organizations.
3. Collaborate with system administrators and security teams to remediate vulnerabilities.
4. Develop and implement scripts and tools to enhance penetration testing activities.
5. Thoroughly document findings and create detailed reports for client stakeholders.
6. Keep abreast of the latest cybersecurity threats, vulnerabilities, and penetration testing methodologies.
7. Conduct typical security testing activities, including SAST/DAST, software/web application/containers/IoT penetration testing, API penetration testing, network penetration testing, mobile application penetration testing, and architecture security analysis and threat modeling as required.

Requirements:

1. Extensive experience as a penetration tester or in a similar role.
2. Proficiency in penetration testing tools and techniques, including OWASP Top Ten.
3. Strong knowledge of network protocols, firewalls, VPNs, and other security technologies.
4. Expertise in scripting languages such as Python, Bash, or Perl.
5. Exceptional analytical and problem-solving skills.
6. Stellar communication and report-writing skills, with the ability to produce executive-level and penetration-testing reports with minimal errors.
7. Ability to work both independently and collaboratively in a team environment.
8. Deep understanding of testing methodologies, including OWASP Web and Mobile testing methodologies, OSSTMM, and the MITRE ATT&CK Framework.
9. Experience with platforms such as Burp, Kali Linux (must-have), Nmap, Qualys, and Nessus is highly beneficial.
10. Relevant certifications such as OSCP, CEH, C|PENT, CRT are considered an asset.

How to Apply:

• Please email your resume, a cover letter, expected salary and relevant certifications to careers@informaglobal.ca.
• Please include "Senior Penetration Tester – [Your Name]" in the subject line.
• If available, include examples of previous penetration testing work or projects to showcase your expertise.

Note: We thoroughly review every resume received for our advertised positions. However, due to the high volume of applications, we regret that we are unable to respond individually to each applicant. Please note that we will only contact candidates who have been shortlisted and who meet the necessary skill requirements for the position.