Attack Surface Reduction Specialist

1 month ago


Montreal, Quebec, Canada WSP Canada Full time
The Opportunity:

The Attack Surface Reduction Analyst will play a pivotal role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment. This role involves a combination of strategic analysis, hands-on implementation, and collaboration with various teams to reduce our attack surface and improve our overall security resilience.

Why Choose WSP?
  • We value and are committed to upholding a culture of inclusion and belonging
  • Our Flexible Work Policy - we recognize the importance of balance in our lives and encourage you to prioritize the balance in yours. We will support you on and off the job so you can be fully present in both your work and home lives.
  • A Canadian success story - we're proud to wear the red and white of this beautiful country and show the world what Canada has to offer.
  • Enhance the world around you - from the environment to the highways, to the buildings and the terrain, WSP is the fabric of Canada.
  • Outstanding career opportunities - we're growing and pushing ourselves every day to be greater than yesterday - we're open to your ideas and trying new things.
  • A phenomenal collaborative culture and a workforce filled with genuinely good people who are doing humbly important work. Come find out for yourself what it's like to be a part of our journey.

We offer attractive pay, flexible work options, a great corporate culture, comprehensive and employee-focused benefits including virtual healthcare and a wellness platform as well as great savings programs, and a clear vision for the future.

What You Can Expect to Do Here:

Specific areas of responsibility may fall into any one of the following areas of Attack Surface Reduction:

  • Vulnerability Assessment: Conduct thorough assessments to identify potential vulnerabilities and weaknesses in our systems, applications, and networks.
  • Attack Surface Analysis: Analyze and map out the organization's attack surface, including endpoints, network components, applications, and cloud environments, to identify areas of risk.
  • Mitigation Strategies: Develop and implement strategies and controls to reduce attack vectors and minimize potential entry points for malicious activities.
  • Risk Evaluation: Continuously evaluate emerging threats and vulnerabilities and assess their impact on our attack surface.
  • Incident Response Support: Collaborate with the Incident Response team to address and resolve security incidents related to identified vulnerabilities or attack vectors.
  • Collaboration: Work closely with I&O, Risk, SOC, SecDevOps, and other relevant teams to integrate security practices into the development and deployment processes.
  • Security Tools: Utilize and configure security tools and technologies for vulnerability scanning, threat intelligence, and attack surface monitoring.
  • Documentation & Reporting: Maintain detailed documentation of vulnerabilities, risk assessments, and mitigation actions. Prepare and present reports to stakeholders on security posture and risk status.
  • Continuous Improvement: Stay current with industry trends, threat intelligence, and emerging technologies to continually enhance our attack surface reduction strategies.
Leadership and People Responsibilities
  • Develop positive working relationships with other team members and business partners and partners across teams to align with WSP's internal and external client demands.
  • Provide feedback on the governance process for continued improvement.
Finance/Budgetary Responsibilities
  • Provide feedback on tooling and identify additional needs.
  • Plan for the expansion of security tools to cover ongoing needs.
  • Evaluate license usage and potential growth.
What You'll Bring to WSP:

Required

  • 7-+ years related experience in Security Operations, Network Security, Vuln. Management or similar position.
  • Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering, Data Sciences, or related field.
  • Strong knowledge of security assessment tools, vulnerability scanning, and penetration testing.
  • Proficiency in security tools: Microsoft Defender, Microsoft Defender EASM, BitSight, Cybel Angel and others.
  • Strong analytical skills with a keen eye for detail and accuracy.
  • Effective communication skills, with the ability to clearly convey technical concepts to both technical and non-technical stakeholders.
  • Experience with IT Governance frameworks such as COBIT, ITIL, NIST and ISO 2700x.
  • Experience with risk management, including risk analysis, mitigation, and monitoring.
What Sets You Apart
  • Master's degree in information technology, Computer Science, Engineering, Data Sciences or related field.
  • Security+, CISSP, or other related certifications.


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction SpecialistWSP is seeking a highly skilled Attack Surface Reduction Specialist to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction SpecialistWSP is seeking a highly skilled Attack Surface Reduction Specialist to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystThe Attack Surface Reduction Analyst will play a pivotal role in enhancing WSP's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment. This role involves a combination of strategic analysis, hands-on implementation, and collaboration with various...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystThe Attack Surface Reduction Analyst will play a pivotal role in enhancing WSP's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment. This role involves a combination of strategic analysis, hands-on implementation, and collaboration with various...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystWSP is a global consulting firm that assists public and private clients in planning, developing, designing, constructing, operating, and maintaining critical infrastructure projects worldwide.Job SummaryThe Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystWSP is a global consulting firm that assists public and private clients in planning, developing, designing, constructing, operating, and maintaining critical infrastructure projects worldwide.Job SummaryThe Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystWSP is a global consulting firm that helps public and private clients plan, develop, design, construct, operate, and maintain critical infrastructure projects worldwide.Job SummaryThe Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity posture by identifying,...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystWSP is a global consulting firm that helps public and private clients plan, develop, design, construct, operate, and maintain critical infrastructure projects worldwide.Job SummaryThe Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity posture by identifying,...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystWSP is seeking a highly skilled Attack Surface Reduction Analyst to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment.Key...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystWSP is seeking a highly skilled Attack Surface Reduction Analyst to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment.Key...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystThe Attack Surface Reduction Analyst will play a pivotal role in enhancing WSP's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment. This role involves a combination of strategic analysis, hands-on implementation, and collaboration with various...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Attack Surface Reduction AnalystWSP is a global consulting firm that assists public and private clients in planning, developing, designing, constructing, operating, and maintaining critical infrastructure projects worldwide.Job Summary:The Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity...


  • Montreal, Quebec, Canada WSP Full time

    Job SummaryThe Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment.Key ResponsibilitiesConduct thorough assessments to identify potential vulnerabilities and weaknesses in our systems, applications,...


  • Montreal, Quebec, Canada WSP Canada Full time

    The Opportunity:WSP Canada is seeking a highly skilled Attack Surface Reduction Specialist to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment.Key Responsibilities:...


  • Montreal, Quebec, Canada WSP Canada Full time

    The Opportunity:The Attack Surface Reduction Analyst will play a pivotal role in enhancing WSP Canada's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment. This role involves a combination of strategic analysis, hands-on implementation, and collaboration with various teams to reduce our...


  • Montreal, Quebec, Canada WSP Full time

    Job DescriptionThe Opportunity:The Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment.This role involves a combination of strategic analysis, technical expertise, and collaboration with...


  • Montreal, Quebec, Canada WSP Full time

    Job DescriptionThe Opportunity:The Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment.This role involves a combination of strategic analysis, technical expertise, and collaboration with...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Cybersecurity Threat Reduction SpecialistWSP is seeking a highly skilled Cybersecurity Threat Reduction Specialist to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Cybersecurity Threat Reduction SpecialistWSP is seeking a highly skilled Cybersecurity Threat Reduction Specialist to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital...


  • Montreal, Quebec, Canada WSP Full time

    Job Title: Cybersecurity Threat Reduction SpecialistWSP is seeking a highly skilled Cybersecurity Threat Reduction Specialist to join our team. As a key member of our cybersecurity team, you will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital...