In your role, you’ll be part of the Offensive Security Operations Department’s penetration testing team, which is responsible for protecting the organization by drawing on our recognized offensive expertise. Your expertise in this area will be used to conduct pentests to identify threats and vulnerabilities on Desjardins Group surfaces and help remediate them. More specifically, you will be required to :

• Leverage advanced penetration techniques, deep network and application security expertise, reverse engineering skills and a strong knowledge of corporate controls to uncover hidden flaws to identify and exploit system vulnerabilities or weaknesses in a rigorous and ethical manner.
• Act as an offensive security expert to support, advise and catalyze change to strengthen Desjardins Group’s protection against cyberattacks.
• Design, develop, implement and document effective, adapted and precise methodologies and tools, while mitigating the risks associated with their execution.
• Demonstrate autonomy and initiative in updating the technical skills and knowledge related to offensive security expertise, in line with emerging needs, to actively guide and influence change.
• Strategically monitor threats in your area of expertise to help proactively identify emerging security issues.
• Communicate offensive security activity results clearly and accurately, explaining the information in plain language so that all key players understand the risks and take the necessary actions.
• Contribute to the support, development and mentorship of colleagues and key players, both technically and in raising awareness and understanding of threats that the organization seeks to prevent.

What we offer*

• Competitive salary and annual bonus
• 4 weeks of flexible vacation starting in the first year
• Defined benefit pension plan that provides predictable, stable income throughout retirement
• Group insurance including telemedicine
• Reimbursement of health and wellness expenses and telework equipment

*Benefits apply based on eligibility criteria.

#LI-Remote

What you bring to the table

• Bachelor's degree in a related field
• A minimum of eight years of pentest experience with variety of systems (including web applications, networks, cloud and mobile)
• Please note that other combinations of qualifications and relevant experience may be considered
• Experience using threat modeling methodologies or comparable experience visually representing data and process flows in a corporate environment
• Recognized pentest certification such as OSCP, OSWE or OSCE
• Knowledge of French is required
• Intermediate advanced proficiency of English, both oral and written due to the nature of the duties or work tools or because the position involves interactions with English-speaking partners, members and/or clients
• Expertise in identifying, analyzing and prioritizing security vulnerabilities
• Proficiency in security testing tools such as Burp, Nmap, Wireshark, Metasploit and Cobalt Strike
• Knowledge of Windows and Linux operating system security (hardening and attacks)
• Knowledge of web vulnerabilities such as OWASP Top 10: SQL injection, CSRF, XSS, etc.

Interpersonal Savvy, Strategic mindset

Trade Union (If applicable)

At Desjardins, we believe in equity, diversity and inclusion. We're committed to welcoming, respecting and valuing people for who they are as individuals, learning from their differences, embracing their uniqueness, and providing a positive workplace for all. At Desjardins, we have zero tolerance for discrimination of any kind. We believe our teams should reflect the diversity of the members, clients and communities we serve.

If there's something we can do to help make the recruitment process or the job you're applying for more accessible, let us know. We can provide accommodations at any stage in the recruitment process. Just ask!

Job Family

Security (FG)

Unposting Date

2026-02-5