Specialist in Offensive Security Job Lanaudière area,Lavaltrie Province de Québec Canada,IT/Tech

Location: Lavaltrie

JOB DESCRIPTION

As an Offensive Security Specialist (Level
2), you will conduct end-to-end offensive security assessments to identify, exploit, and document vulnerabilities affecting the organization's products, infrastructure, applications, and platforms. You will plan, execute, and document offensive exercises, demonstrate the real-world impact of discovered weaknesses, and participate in the automation of offensive capabilities. Working closely with the product and security teams, you will contribute to risk prioritization and the strengthening of defense mechanisms, leveraging artificial intelligence technologies to accelerate research, analysis, and certain operational activities.

Core

responsibilities – for all security specialists

Actively contribute to the protection of the company's digital assets.
Participate in projects related to the security posture and its continuous improvement.
Document procedures, analysis results, and lessons learned.
Work closely with coordinators and the Tech Lead.
Participate in internal reviews, technical audits, and simulation exercises.
Maintain your skills in day through self-directed learning or structured training.
Respond professionally to internal communication platforms (Teams, email, tickets, etc.).
Welcome, direct, or refer visitors appropriately to the security area.

Specific Responsibilities for the Level 2 Offensive Security Specialist Role Offensive Testing

Participate in penetration tests on web applications, APIs, infrastructure, SaaS platforms, and internal environments.
Identify, exploit, and document application, network, or system vulnerabilities in a controlled manner.
Test the limits of security controls within an authorized framework and demonstrate the real-world impact of discovered vulnerabilities.
Participate in advanced offensive exercises in collaboration with specialists Seniors.
Contribute to patch validation and vulnerability lifecycle management.

Analysis, Documentation, and Automation

Document vulnerabilities with clear technical evidence, reproduction steps, and a realistic risk assessment.
Contribute to writing penetration test reports and technical recommendations.
Participate in risk prioritization with relevant teams.
Automate recurring offensive testing or security validation tasks.
Contribute to the development or improvement of internal tools related to offensive activities.

Artificial Intelligence and Continuous Improvement

Effectively use AI tools to accelerate research, analysis, test scenario generation, and report writing. Technical.
Validate the results produced by artificial intelligence with professional judgment.
Experiment with new approaches using AI to improve offensive capabilities and team productivity.
Conduct continuous monitoring of emerging vulnerabilities, offensive techniques, and specialized tools.

Collaboration

Work collaboratively with the Security, Product, Development, Infrastructure, and IT teams.
Clearly communicate technical risks to different types of audiences.
Respect established scopes, rules of engagement, and operational limits.
Contribute positively to collaboration and knowledge sharing within the team.

QUALIFICATIONS REQUIREMENTS

Between 3 and 5 years of relevant experience in offensive cybersecurity, penetration testing, or Red Teaming.
Recognized offensive cybersecurity certification such as OSCP, OSCP+, or HTB CPTS.
Strong command of Windows, Linux, Active Directory, and web application environments.
Ability to explain risks and technical recommendations clearly to non-specialist teams.

ASSETS

Experience with modern offensive tools (Burp Suite, Nmap, Metasploit, Bloodhound, Sliver, etc.).
Strong interest in the use of artificial intelligence applied to offensive cybersecurity.

CONDITIONS WORK ENVIRONMENT

Dynamic work environment
Flexible 35-hour work week
4 weeks of vacation within the first year of employment
Comprehensive benefits package and wellness program
Access to Telus Health telemedicine service
Group RRSP program accessible from day one
Cell phone and monthly plan provided
Skills and leadership development programs
Breakfast, snacks, and beverages provided
On-site gym
Entertainment room including pinball machines, table tennis, foosball, etc.
Golf and racing simulator

Discover our benefits at:

#J-18808-Ljbffr