Conseiller(e) cybersécurité – tests offensifs et gestion des vulnérabilités

About the role

The Penetration Testing and Vulnerability Management Consultant joins the Security and Fraud Management team of a leading payroll service provider in Canada. Reporting to the Director of Security and Fraud Management, the consultant will lead offensive security testing, active threat hunting and vulnerability management across the organization.

Key responsibilities

• Plan, coordinate and execute continuous penetration testing (Red Teaming) on rotating targets.
• Support corporate security tests, including vulnerability scans, DAST with BurpSuite Enterprise and SAST with SonarQube.
• Conduct retests to verify remediation of identified vulnerabilities.
• Analyze test results, re‑evaluate severity, and filter false positives.
• Perform periodic light penetration tests on random assets following approved methodology.
• Collaborate with the SOC Manager to analyze alerts and identify attack patterns that may require preventive actions.
• Document, track and prioritize vulnerabilities, and provide remediation recommendations to stakeholders.
• Assist incident‑response teams and provide security support for projects.

Required profile

• Strong autonomy and ability to work independently.
• Excellent communication skills and capacity to build relationships with cross‑functional teams.
• Solid understanding of cybersecurity concepts and a willingness to continuously learn new skills.

Required skills

• Penetration testing / Red Teaming
• BurpSuite Enterprise (DAST)
• SonarQube (SAST)
• Vulnerability scanning tools
• SIEM platforms
• Web Application Firewall (WAF)
• Data Loss Prevention (DLP) solutions
• Microsoft Defender