Conseiller ou conseillère, Sécurité offensive, Red Team

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Conseiller ou conseillère, Sécurité offensive, Red Team based in Canada.

This role offers the opportunity to operate at the forefront of offensive cybersecurity within a large, complex enterprise environment.
You will conduct adversary simulation and offensive security activities designed to identify weaknesses before real attackers can exploit them.
Working with experienced cyber defense and insider-threat teams, you will use modern offensive tooling, custom tradecraft, and sophisticated TTPs.
You will design attack chains, research new techniques, and continuously evolve the team’s offensive capabilities.
Beyond hands-on operations, you will provide strategic expertise, influence security standards, and guide stakeholders through complex cybersecurity initiatives.
The role combines deep technical work, research, project leadership, and close collaboration across diverse areas of expertise.
It is a fully remote, full-time opportunity based in Canada, with a strong emphasis on continuous learning, innovation, and meaningful security impact.

• Lead complex offensive security projects and mandates
  , taking responsibility for initiatives with significant organizational impact and potentially broad enterprise-wide scope.
• Advise and support internal stakeholders and partners throughout the positioning, planning, development, implementation, and follow-up of strategic cybersecurity projects and mandates.
• Design, develop, and execute attack chains at varying levels of sophistication as part of adversary simulation and Red Team activities.
• Conduct research and development to continuously strengthen and evolve offensive security tradecraft, tooling, and techniques.
• Develop creative and stealthy offensive tools and automation
  , adapting approaches to the objectives and technical characteristics of each engagement.
• Collaborate closely with Cyber Defense and Insider Threat teams to improve prevention, detection, and incident-response capabilities.
• Identify and analyze significant security issues and risks
  , establish diagnoses, and provide actionable recommendations to relevant decision-makers.
• Contribute to the development and evolution of security policies, standards, frameworks, models, and programs supporting strategic initiatives.
• Represent the security function in relevant governance and organizational forums
  , communicating expertise and recommendations to stakeholders and decision-making bodies.
• Support external partnerships and agreements by representing the organization’s security position when required.
• Provide specialist advice and subject-matter expertise
  , acting as a resource and coach for stakeholders and governance groups.
• Document, communicate, and translate technical findings into clear observations, risks, and recommendations that can be understood by both technical and non-technical audiences.
• Maintain strong project organization and stakeholder relationships
  , coordinating multiple interfaces across diverse areas of expertise.

• Bachelor’s degree in an appropriate discipline, or an equivalent combination of relevant education and experience.
• At least 6 years of relevant professional experience in cybersecurity or a related field.
• Strong expertise in offensive security
  , with professional experience in Red Team operations and/or stealth-focused penetration testing.
• Advanced experience developing stealthy offensive tools and automating tasks using multiple programming or scripting languages.
• Strong expertise operating Command and Control (C2) infrastructure within authorized offensive security engagements.
• Experience deploying and maintaining infrastructure using tools such as Terraform and Ansible.
• Strong understanding of application and infrastructure security exploitation techniques and offensive security methodologies.
• Knowledge of modern evasion techniques targeting defensive technologies such as antivirus, EDR, and NDR solutions.
• General understanding of enterprise security controls and defensive mechanisms
  , including how offensive techniques interact with…