Information Security Analyst 3
The Great-West Life
8d ago

Who we are :

Great-West Life is a leading Canadian insurer, focused on improving the financial, physical and mental well-being of Canadians.

For more than 125 years, our customers across Canada have trusted us to provide for their financial security needs and deliver on the promises we have made.

Together with our subsidiaries London Life and Canada Life, we serve the financial security needs of 13 million people across Canada.

At Great-West Life, we believe in improving the financial, physical and well-being of all Canadians. The foundation of our strategy is placing the customer at the centre of everything we do.

A key element of this strategy is transforming the customer experience.

Where you’ll be :

As a Senior Red Team Specialist , you will be part of the first line of cyber defense. This role has a broad scope, ranging from attacking Great-

West Life applications, services, infrastructure and processes, discovering weaknesses in Great-West Life’s digital and physical systems, and working with the SOC and service owners to improve our detective and preventative capabilities.

This role will help provide Great-West Life with certainty that our cyber program is being implemented and managed effectively.

You will report to the Director of Security Assurance and support the Global Information Security office in the Toronto, Ontario location.

What you’ll do :

  • Broad responsibilities will be to develop, maintain, and enhance a world-class infrastructure for conducting Red Team Operations
  • Lead technical team through simulation testing, adversarial testing and provide recommendations
  • Work closely with the security operations center (SOC) to leverage intelligence sources, identify new threats in the wild and verify the organization’s security posture against them.
  • Assist in the planning and scoping of the red team infrastructure design modifications for both continuous testing assignments and targeted exercises
  • Conduct penetration tests and works with product owner to remediate findings
  • Implement adversarial attack testing using the Mitre Att&ck framework
  • Train offensive and defensive colleagues on new TTPs and mentor teammates.
  • Who you are :

  • Bachelor degree from an accredited college or university or equivalent experience
  • Minimum five years’ experience as an information technology professional with at least one of those in information security demonstrating the accountabilities as listed above
  • Hold at least one information security certification or actively working towards at least one security certification (e.g. CISSP, CISM)
  • Hold at least one Pentesting certification or actively working towards one such as OSCP, OSCE
  • Robust technical background with exposure to multiple aspects of information technology, networks, server, application dev, mobile, architecture, storage, cloud etc.
  • Excellent communicator including demonstrated presentation and negotiation skills
  • What really sets you apart :

  • Familiarity with defensive and monitoring technologies such intrusion prevention / detection systems (IPS / IDS), security information and event management systems (SIEMs), firewalls, endpoint protection (EPP) and endpoint detection / response (EDR) tools, as well as user and entity behavior analytics (UEBA).
  • Understanding of OWASP, the MITRE ATT&CK framework and the software development lifecycle (SDLC).
  • Understanding of Microsoft Active Directory, Azure AD and Amazon AWS and common attacks for each
  • Competent with testing frameworks and tools such as Burp Suite, Metasploit, Cobalt Strike, Kali Linux, Nessus, PowerShell Empire and AutoSploit.
  • Proficient in scripting languages such as Python, PowerShell, Bash and Ruby.
  • What you’ll like about working here :

    We offer a challenging, team-oriented work environment, competitive income and benefits, and opportunities for professional and personal development and growth.

    We provide a total rewards package that is competitive and consistent with our core values. Our variable incentive and compensation programs support our performance culture by rewarding our high achieving teams and individuals.

    Our health and dental benefits are flexible and comprehensive to suit a variety of needs.

    We also offer an employee pension plan, a share purchase plan, group RRSPs, discounted home and

    auto insurance and preferential rates for home mortgages. *LI-AC1

    Discover your opportunity . Apply today!

    Great-West Life offers competitive compensation, great benefits such as medical, dental, life insurance, wellness account and personal days not to mention onsite cafeteria and fitness facilities.

    If you’d like to join our team submit your information online and introduce yourself.

    Together Great-West Life, London Life and Canada Life serve the financial security needs of more than 13 million people across Canada, with additional operations in Europe and the United States.

    As members of the Power Financial Corporation group of companies, we’re one of Canada’s leading insurers with interests in life insurance, health insurance, investment and retirement savings.

    We offer a broad portfolio of financial and benefit plan solutions for individuals, families, businesses and organizations.

    We are committed to providing an inclusive, accessible environment, where all employees and customers feel valued, respected and supported.

    We are dedicated to building a workforce that reflects the diversity of the communities in which we live, and to creating an environment where every employee has the opportunity to reach their potential.

    Great-West Lifeco would like to thank all applicants, however only those who qualify for an interview will be contacted.

    Add to favourites
    Remove from favourites
    My Email
    By clicking on "Continue", I give neuvoo consent to process my data and to send me email alerts, as detailed in neuvoo's Privacy Policy . I may withdraw my consent or unsubscribe at any time.
    Application form