Senior Cyber Security Analyst Penetration Testing, Firm IT

General Position Summary: Firm Information Technology Services – Senior Cyber Security Analyst Make an impact with our Technology. As a key team member of the Cyber Security team as a Senior Cyber Security Analyst (Penetration Testing).This diverse team of tech-savvy problem solvers embraces digital transformation and the possibilities technology brings to the future of our industry. As a trusted advisor, you’ll support, utilize and maintain MNP’s technology to ensure smooth IT operations, enabling team members to work efficiently and effectively. MNP’s Cyber Security Team provides round the clock vigilance to MNP’s environment. The team not only monitor threats and prevents them but also performs proactive drills to anticpate and mitigate all new and emerging forms of threats. Our team members are committed to continuous learning and stay updated on the latest trends in cyber threats and security. Being a 24/7 service to MNP our team members are expected to work in shifts. National in scope and local in focus, MNP is one of Canada’s largest professional service firms providing client-focused accounting, consulting, tax, and digital services to clients. Founded in 1958, MNP today is a CAD 2 billion+ organization with 9600+ employees and 154 offices across Canada. MNP prides itself on being an ‘advisor’ to its clients(individuals, businesses, and organizations), focusing on their success by delivering personalized strategies and solutions that help clients reach their full potential — wherever business takes them. MNP set up MNP SPARK its GCC in Bangalore in May 2025 with a focus on enabling the firm drive growth, efficiency, customer delight and innovation, by leveraging high quality talent in India. MNP Spark is like any other MNP region/office - front facing, client focused but working with all of MNP regions in Canada to deliver services Responsibilities: Lead and execute comprehensive Red Team engagements, simulating persistent and stealthy threat actors to assess detection and response Perform network, web application, API, wireless, Active Directory, and Cloud (Azure/AWS/GCP) penetration tests Develop and utilize custom scripts, exploits, and tools in languages such as Python, PowerShell, or Bash Emulate attacker tactics, techniques, and procedures (TTPs) in alignment with MITRE ATT&CK and threat intelligence Conduct assumed breach and Purple Team exercises, working closely with the Blue Team to tune detection and improve visibility Provide detailed technical reports, risk ratings, and mitigation recommendations for executive and technical stakeholders Contribute to the design of offensive security roadmaps, methodology frameworks, and internal tooling libraries Stay current on emerging threats, vulnerabilities, and security research Integrate security testing into the development life cycle and CI/CD pipelines using DAST and SAST tools Collaborate with development teams to ensure secure coding practices and application security architecture Manage External Attack Surface Management (EASM) by identifying, monitoring, and mitigating risks associated with external-facing assets Requirements Qualification Skills: · Familiarity with penetration testing tools like Burp Suite, Nmap, Metasploit, and BloodHound · Basic to intermediate experience with scripting languages (e.g., Python, Bash, or PowerShell) · Foundational knowledge of networking, OS internals, and common attack vectors · Exposure to cloud environments and security assessments (Azure, AWS, or GCP) are considered an asset Educational Qualifications: · Bachelor Or Master in Technology · Bachelor Or Master of Computer Applications Certifications: Certifications such as OSCP, eJPT, CRTO, or CEH are considered an asset Experience: • 4 to 6 years of experience in penetration testing, security assessments, or offensive security