RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. The clients we serve are the engine of global commerce and economic growth, and we are focused on developing leading professionals and services to meet their evolving needs in today’s ever-changing business environment.

We are looking for a Cybersecurity Testing Associate to join our Security & Privacy Risk Consulting Team! This role can be based in Edmonton, Calgary or Toronto.

Responsibilities

Perform analysis and testing to verify the strengths and weaknesses of client IT environments utilizing commercial and open-source security testing tools
Perform internet penetration testing (blackbox/greybox /whitebox testing) and network architecture reviews (manual/automated)
Perform other security testing tasks such as wireless penetration testing, social engineering campaigns (email, web, phone, physical, etc.), mobile application testing, embedded device testing, and similar activities meant to identify critical weaknesses within client environments
Assist with the development of remediation recommendations for identified findings
Identify and clearly articulate findings to senior management and clients
Help identify improvement opportunities for clients

Basic Qualifications

1-2 years of pen testing experience, with a preference for prior consulting or professional services backgrounds
Technical background in networking/system administration, security testing or related fields
Strong leadership and communication skills
Ability to write at a "publication" quality level in order to communicate findings and recommendations to the clients’ senior management team
High degree of integrity and confidentiality
Ability to adhere to company policies and best practices
Strong verbal and written communication
Strong multitasking and project management skills
Ability to travel as needed up to 5-10%

Preferred Qualifications

Bachelor’s degree in computer science or related field
In-depth knowledge of TCP/IP
Perl, Python, Bash, or C experience
Operating system configuration and security experience (Windows, HP-UX, Linux, Solaris, AIX, etc.)
Configuration and security experience with firewalls, switches, routers, VPNs
Experience with security and architecture testing and development frameworks, such as the Open Web Application Security Project (OWASP), Open Source Security Testing Methodology Manual (OSSTMM), the Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), and NIST SP800-115
Familiarity with security testing techniques such as threat modeling, network discovery, port and service identification, vulnerability scanning, network sniffing, penetration testing, configuration reviews, firewall rule reviews, social engineering, wireless penetration testing, fuzzing, and password cracking and can perform these techniques from a variety of adversarial perspectives (white-, grey-, black-box)
Experience with discovering, utilizing, and possibly writing exploits for such vulnerabilities as buffer and stack overflows
Familiarity with the logistics of security testing such as acquiring authorization for testing, reporting, risk analysis of findings, data handling, and legal considerations
Commercial application security tools experience (Nessus, Nexpose, Qualys, Appdetective, Appscan, etc.)
Open source and free tools experience (Kali Linux suite, Metasploit, nmap, airsnort, Wireshark, Burp Suite, Paros, etc.)
Practical Network Penetration Tester (PNPT) Certified; GIAC Certified Penetration Tester (GPEN); Offensive Security Certified Professional (OSCP); or equivalent development or testing certification (ECSA, CEPT, CPTE, CPTS, etc.) certifications
Certified Information Systems Security Professionals® (CISSP®); Certified Information Systems Auditor® (CISA®); Certified Information Security Manager® (CISM®) certifications

In accordance with applicable law and RSM policy, prospective hires will be required to demonstrate that they have been fully vaccinated for COVID-19. If not vaccinated for COVID-19 they must qualify for an accommodation to this vaccination requirement or participate in testing. If you are located in New York, pursuant to current applicable law, you will be required to be vaccinated to enter the New York office and testing is not an option to enter the New York office.

You want your next step to be the right one. You've worked hard to get where you are today. And now you're ready to use your unique skills, talents and personality to achieve great things. RSM is a place where you are valued as an individual, mentored as a future leader, and recognized for your accomplishments and potential. Working directly with clients, key decision makers and business owners across various industries and geographies, you'll move quickly along the learning curve and our clients will benefit from your fresh perspective.

Experience RSM. Experience the power of being understood.

RSM is an equal opportunity/affirmative action employer. Minorities/Females/Disabled/Veterans.

RSM

New Jobs

Associate, Cybersecurity Testing