Cyber Security Analyst Penetration Testing, Firm IT

General Position Summary: Firm Information Technology Services Cyber Security Analyst

Make an impact with our Technology. As a key team member of the Cyber Security team as a Cyber Security Analyst (Penetration Testing). This diverse team of tech-savvy problem solvers embraces digital transformation and the possibilities technology brings to the future of our industry. As a trusted advisor, youll support, utilize and maintain MNPs technology to ensure smooth IT operations, enabling team members to work efficiently and effectively.

MNPs Cyber Security Team provides round the clock vigilance to MNPs environment. The team not only monitor threats and prevents them but also performs proactive drills to anticipate and mitigate all new and emerging forms of threats. Our team members are committed to continuous learning and stay updated on the latest trends in cyber threats and security. Being a 24/7 service to MNP our team members are expected to work in shifts.

National in scope and local in focus, MNP is one of Canadas largest professional service firms providing client-focused accounting, consulting, tax, and digital services to clients. Founded in 1958, MNP today is a CAD 2 billion+ organization with 9600+ employees and 154 offices across Canada.

MNP prides itself on being an advisor to its clients(individuals, businesses, and organizations), focusing on their success by delivering personalized strategies and solutions that help clients reach their full potential wherever business takes them.

MNP set up MNP SPARK its GCC in Bangalore in May 2025 with a focus on enabling the firm drive growth, efficiency, customer delight and innovation, by leveraging high quality talent in India. MNP Spark is like any other MNP region/office - front facing, client focused but working with all of MNP regions in Canada to deliver services

Responsibilities

Assist in performing internal and external penetration tests across applications, systems, and cloud infrastructure

Support Red Team exercises, including reconnaissance, exploitation, and post-exploitation activities under supervision

Conduct vulnerability assessments, validate findings, and assist in proof of concept exploit development

Write and maintain scripts and automation tools to streamline engagements and reporting

Contribute to the development of Red Team documentation, including threat emulation plans, reports, and lessons learned

Work closely with defensive teams to support Purple Team efforts and security control validation

Stay informed on current threats, CVEs, and industry research

Manage External Attack Surface Management (EASM) by identifying, monitoring, and mitigating risks associated with external-facing assets

Continuously assess and improve the security posture of external assets, including web applications, APIs, and cloud services

Provide detailed technical reports, risk ratings, and remediation recommendations for identified vulnerabilities and attack vectors

RequirementsQualification

Skills:

Familiarity with penetration testing tools like Burp Suite, Nmap, Metasploit, and BloodHound

Basic to intermediate experience with scripting languages (e.g., Python, Bash, or PowerShell)

Foundational knowledge of networking, OS internals, and common attack vectors

Exposure to cloud environments and security assessments (Azure, AWS, or GCP) are considered an asset

Educational Qualifications

Bachelor Or Master in Technology

Bachelor Or Master of Computer Applications

Certifications

Certifications such as OSCP, eJPT, CRTO, or CEH are considered an asset

Experience:

2 to 4 years of experience in penetration testing, security assessments, or offensive security .