Penetration Tester

As part of the Control Gap team, you work with high-profile clients in various industries with various technologies, collaborate with a group of highly-skilled professionals, and mentor and coach junior security professionals dedicated to becoming strong security testers and ethical hackers.

We value innovative individuals who are motivated to take on a leadership role in growing this professional services practice.

Our people are our most valuable assets and we believe in fostering career development and growth opportunities for every individual on our team. We also offer a competitive benefits package and an excellent work environment that encourages teamwork.

**Responsibilities**:

- Create professional reports for clients that detail assessment findings and recommendations
- Mentor junior security professionals with desire to learn the security testing trade
- Manage and oversee vulnerability programs to detect and remediate vulnerabilities in organizations.
- Lead meetings, chair conference calls, action follow-ups, and proactively interact with clients to move projects forward to ultimate completion.
- Strategize in developing innovative security testing services for emerging technologies and standards.
- Assist the sales team with pre-sales activities, needs analysis, and solution design
- Attend industry events and leading webinars
- Travel to company offices and client work sites across Canada

Technical Skills:

- Perform segmentation testing to validate integrity of segmentation and network boundary controls
- Working knowledge of symbolic execution, malware analysis, pivoting, source code scanning, exploit writing
- Experience and knowledge with industry tools, security threats, attacks & countermeasures, sources of industry information and standards
- Knowledge of cloud security platforms and relevant security measures
- Knowledge of encryption algorithms, techniques, deployments
- Develop and test exploits and scripts
- Skilled in physical penetration testing techniques, including physical security assessments, social engineering, and on-site assessments

Education and Work Experience:

- Degree in Information Security or related field is an asset.
- At least 3 years of experience in penetration testing
- Minimum 5 years of experience in an Information Technology field
- Minimum 5 years of experience working in Information Security domains.
- Minimum 5 years of experience measuring security controls, IT auditing, business processes, providing advice, and/or related security consulting experience.

Industry Certifications: (or equivalent penetration testing certifications)
- Certified Information Systems Security Professional (CISSP)
- GIAC Web Application Penetration Tester (GWAPT)
- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- GIAC Mobile Device Security Analyst (GMOB)
- Offensive Security Certified Professional (OSCP)
- Offensive Security Certified Expert (OSCE)
- Practical Network Penetration Tester (PNPT)

Soft Skills:

- Exceptional customer service, communication, and interpersonal skills
- Strong written and verbal communication skills.
- Strong organizational skills
- Strong time management skills
- Honesty and integrity
- Dedication to providing solutions to meet or exceed client's needs and expectations.
- Ability to execute, problem-solve, and deliver successful engagements.
- Ability to handle challenges and project work loads.

**Benefits**:

- Company paid medical and dental benefits and wellness benefits.
- Company paid cellular phone, phone service, and data plan.
- Company paid continuing professional education and certification maintenance.
- 4 weeks of paid vacation
- Company team building events throughout each year.
- Profit Sharing & RRSP Sharing
- Control Gap offers custom-built state of the art tools and a proven processes that allows our assessors to be comfortable, efficient, and organized while providing excellent audit quality.

**Location**:

- Flexible work options, including fully remote.

For more information on Control Gap Inc or our job openings please refer to our