Senior Security Analyst (Offensive Security & Penetration Testing)
- Pay Rate: $59.00/hour, depending on experience
- Contract Length: 6 Months
- Location: Calgary, Alberta
Raise is currently hiring a Senior Security Analyst (Offensive Security & Penetration Testing) on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client is a market leading financial institution
Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.
Description
As a Senior Security Analyst specializing in Offensive Security, you will be a key player in safeguarding our clients digital ecosystem. You won’t just be scanning for vulnerabilities; you will be simulating real-world adversary tactics to stress-test our defenses. This role bridges the gap between deep technical exploitation and strategic risk communication, ensuring that our security posture evolves as quickly as the threat landscape.
Responsibilities
- Advanced Penetration Testing: Lead Black, Grey, and White Box testing across web applications, APIs, network infrastructure, and cloud environments (AWS/Azure/GCP).
- Purple Teaming & Adversary Emulation: Design operations to test detection and response capabilities. Work side-by-side with the Blue Team to validate fixes and refine preventative controls.
- TTX Technical Design: Build technically grounded attack patterns and "injections" for enterprise-wide crisis simulations and operational Tabletop Exercises.
- Vendor Management: Define Statements of Work (SOW) and Rules of Engagement (ROE) for external testing partners, managing the lifecycle from initial scoping to final risk acceptance.
- Tool Development: Build custom scripts (Python, PowerShell) to automate assessments and expand the scope of security testing.
- Risk Communication: Translate complex technical vulnerabilities into actionable business risks for non-technical stakeholders across the organization.
- Documentation & Peer Review: Maintain high-quality SOPs and technical runbooks. Conduct peer reviews of assessment reports to ensure maximum accuracy and reproducibility.
Qualifications
- 5+ years of dedicated experience in offensive security, penetration testing, or ethical hacking.
- Expert Penetration Testing: Proven hands-on experience exploiting modern systems, including OWASP Top 10, API flaws (CWE/CVE), and cloud-specific misconfigurations.
- Scripting & Automation: Proficiency in Python or PowerShell for exploit development and custom tool creation.
- Offensive Frameworks: Advanced knowledge of Burp Suite, Cobalt Strike, Metasploit, and Kali Linux.
- Cloud Security: Experience testing within cloud-native architectures (AWS, Azure, or GCP).
- Education and Certifications
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical field. Equivalent professional experience will be considered.
- Nice to have Certifications (OSCP or OSWE, GPEN or GXPN, COSSP, Cloud-specific certifications (e.g., AWS Certified Security Specialty).
Additional Information
- A requirement for candidates to be considered for this role will be to complete a criminal and credit check (including Canadian Credit Risk Score)
Looking for meaningful work? We can help!
Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity.
We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.
We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/
In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at +1 800-567-9675 or hello@raiserecruiting.com.
#WES
#LI-SC1