[Hiring] Senior Security Consultant @TELUS

Role Description

Join our team at TELUS Cyber Security as a Senior Consultant with our Security Professional Services team. Reporting to the Principal, Cyber Security Professional Services, you will support client security testing engagements.

• Proficient with current application vulnerabilities, particularly those listed in the OWASP Top 10 and CWE Top 25.
• Practical expertise with commercial and open-source intrusion testing tools (e.g., Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, CANVAS, SQLMap, Empire, etc.).
• Able to support client projects and mandates, write reports, and prepare presentations, leveraging communication skills to popularize technical findings to a non-specialized audience.
• Good knowledge of Linux and Windows operating systems.
• Some experience with programming languages (Python, PowerShell, Ruby, or other relevant languages).
• Familiar with industry standard methodologies and standards in penetration testing (PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, CVSS, etc.).
• Advanced knowledge of English is required for interaction with external and internal parties and for working with IT tools whose interface is only accessible in English.

Qualifications

• 5+ years of experience in penetration testing, development, and/or technical support in cybersecurity.
• Passion for cybersecurity with an "ethical hacker" mindset.
• Desire to evolve in a dynamic, innovative, and modern technological environment.
• Mastery of offensive security tools such as Qualys, Nessus, Nmap, and others.
• Comfortable with web application assessment using Burp Suite, SQLMap, and OWASP Zap.
• Interest in continuous learning of new technologies.
• Strong oral and written communication skills, collaborative spirit, and report writing abilities.
• Experience working with clients from various business sectors and types of organizations.
• Capability of analyzing complex problems and discussing them in a simple, logical, and thoughtful manner.

Requirements

• Concrete practical experience in the field.
• Understanding of Internet of Things (IoT) security.
• At least 8 years of experience in information technologies.
• University degree or equivalent experience in a relevant discipline.
• Knowledge of social engineering techniques and wireless security testing.
• Professional certifications (e.g., OSCP) or willingness to obtain them.
• Basic knowledge of GRC (Governance, Risk and Compliance) standards.
• Contributions to open-source projects.
• Experience with CTF (Capture The Flag) competitions and/or "bug bounty" programs.
• Experience in software development.
• Knowledge of current cloud infrastructures (AWS, Azure, GCP, etc.).
• Bilingualism (French and English).

Certifications (Nice-to-haves)

• GIAC Web Application Penetration Tester (GWAPT).
• GIAC Certified Penetration Tester (GPEN).
• Offensive Security Certified Expert (OSCE).
• Certified Secure Software Lifecycle Professional (CSSLP).
• Certified Security Analyst (ECSA).

Benefits

This position is a mobile/remote work setting. The successful candidate will be required to undergo a security check and may need to meet eligibility requirements for access to classified information.