GLI Secure is seeking an experienced Cybersecurity Consultant II (penetration tester) at one of our Eastern Canada locations.
Who We Are…
Since 2001, GLI Secure has helped businesses meet their IT, cybersecurity, and compliance needs. We partner closely with our clients to understand their challenges and deliver tailored solutions that strengthen their security and expand their capabilities.
Why You Should Work Here…
Our employees are our biggest investment. We offer competitive salaries, top-notch benefits, a culture built around career growth, and the chance to collaborate with colleagues around the world.
What You Will Accomplish Here…
As a Cybersecurity Consultant II, you will independently lead assessments that identify and exploit vulnerabilities across networks, systems, cloud environments, web and mobile applications, and APIs. You will take on larger, more complex engagements, simulating real-world attacks and adapting both your methodology and your tooling to challenging environments.
You will also produce and peer review detailed reports, advise clients on remediation, mitigating controls, and compliance requirements, help them build a stronger long-term security posture, and serve as a mentor and technical resource to junior members of the team.
Duties and responsibilities include, but are not limited to:
Plans and executes complex, multi-faceted security assessments without supervision for a wide variety of assigned clients.
Takes ownership of assigned engagements end to end, coordinating with project managers, clients, and other consultants throughout the project lifecycle.
Must be able to independently troubleshoot common technical issues, determine root causes, and address project blockers with clients until they are resolved.
Presents findings to technical and executive audiences and leads discussions on risk ratings, exceptions, and remediation plans.
Ensures testing and deliverables meet applicable regulatory and quality requirements for clients.
Mentors junior consultants, providing technical guidance, feedback, and support for their professional development.
Provide internal and external clients with exceptional service in a professional, courteous, and timely manner.
Stays up-to-date on current tools, technologies and vulnerabilities and contributes improvements to testing methodologies and internal processes.
Experience, Education, Skills, and Credentials:
A minimum of 3 years of prior experience in a related position is required.
Must hold an industry-recognized penetration testing certification such as OSCP, eCPPT, or SANS GPEN.
Must have a strong working knowledge of Linux, Windows, network, web application, and cloud security.
Must have demonstrated experience independently performing network, web application, and API penetration tests.
Must have excellent interpersonal and customer service skills.
Must be able to work autonomously and take ownership of assigned projects from start to finish.
Must have the ability to communicate, both orally and in writing, with other members of the team and clients.
Must have the ability to handle and organize multiple projects and deadlines.
Must demonstrate a high degree of attention to quality, details, and correctness.
Bachelor’s degree in Computer Science, Information Systems or a related field is preferred, however related experience may also be acceptable.
The following skills are preferred, but not required:
Advanced Offensive security certifications (such as OSEP, OSWE, OSED, eWPTX, or CRTO) or cloud certifications (AWS, Azure) are a plus.
Experience testing gaming, lottery, or other regulated environments, including familiarity with jurisdictional testing and reporting requirements.
Scripting and automation skills (such as Python, PowerShell, or Bash) used to build custom tooling and validate findings.
Understanding of information security frameworks such as ISO/IEC 27001:2022, and NIST CSF.
Experience supporting team members' technical development (e.g. through mentoring, service development or research) and contributing to company technical processes overall.
Experience with physical security testing, phishing and social engineering techniques.
Location: This is an in-office position located at one of our Eastern Canada locations.
Schedule: Normal hours are Monday through Friday, 40 hours per week
Pay: $75,000 - $80,000 based on experience
Travel: Up to 50% travel is expected for this position.
Benefits:
We offer a competitive total compensation packet, with benefits that include…
Comprehensive Health, Dental, and Vision Insurance
15 days of vacation
8 sick days
RRSP (Registered Retirement Savings Plan) GLI matches 100% of your RRSP elective deferral, not to exceed 3% of your compensation
Annual Discretionary Bonus
Anniversary Reward Bonus
Educational Assistance Program
Gaming Laboratories International (GLI) is a gaming services company. Any of our employees may be required to obtain a gaming license within one or all of the gaming jurisdictions. If you are requested by GLI to obtain a gaming license, your continued employment may be contingent on your ability to obtain that gaming license.
This job description should not be interpreted as all-inclusive; it is intended to identify the major responsibilities and requirements of the job. The incumbent may be requested to perform other job-related tasks and responsibilities than those stated above.
GLI is an Equal Opportunity Employer
