Information Security Analyst - I

• This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Analyst - I based in Canada.
• This role offers the opportunity to strengthen cybersecurity defenses by identifying vulnerabilities and helping organizations improve their security posture.
• You will perform penetration testing, vulnerability assessments, and security analysis across diverse technology environments.
• The position combines offensive security expertise, technical investigation, client collaboration, and continuous improvement.
• You will contribute to building safer digital systems by discovering risks and guiding teams toward effective remediation.
• This role is ideal for an early-career security professional who enjoys solving complex challenges and exploring emerging threats.
• You will work with modern cybersecurity technologies while gaining valuable experience in application, cloud, and infrastructure security.

Accountabilities

• Conduct vulnerability assessments and penetration testing across web applications, mobile applications, cloud infrastructure, SaaS applications, network devices, and open-source projects.
• Perform black-box and white-box security testing to identify vulnerabilities, including business logic issues and technical weaknesses.
• Develop, test, and improve security rule sets for dynamic application security testing (DAST) solutions.
• Analyze security findings and provide actionable recommendations to help clients remediate vulnerabilities.
• Collaborate directly with clients through calls and written communication to explain security issues and remediation approaches.
• Support clients in defining clear action plans for vulnerability resolution and improving their security practices.
• Maintain and improve vulnerability management systems and processes.
• Stay updated on emerging cybersecurity threats, techniques, and industry best practices.
• Contribute to continuous improvements in security testing methodologies and internal tools.

Requirements

• 1-3 years of experience performing penetration testing or vulnerability assessments across multiple environments.
• Experience testing web applications, cloud infrastructure, SaaS applications, or other technology assets.
• Knowledge of black-box and white-box security testing methodologies.
• Ability to identify business logic vulnerabilities and assess complex security risks.
• Certification such as CEH, OSCP, or CREST is preferred.
• Ability to read and understand code in at least one programming language.
• Strong analytical and problem-solving skills with attention to technical details.
• Experience communicating directly with customers through calls and emails.
• Passion for cybersecurity and willingness to continuously learn new security techniques.
• Experience with published CVEs, bug bounty programs, or Capture The Flag (CTF) competitions is a plus.

Benefits

• Fully remote work opportunity with flexibility to work from anywhere.
• Opportunity to work on real-world cybersecurity challenges and security research initiatives.
• Exposure to advanced penetration testing and vulnerability management practices.
• Collaborative startup environment focused on innovation and professional growth.
• Opportunity to showcase your expertise while contributing to impactful security solutions.
• Learning opportunities in a rapidly evolving cybersecurity field.
• Team events and workcation opportunities.